14 CVEs published in the last four months and 3 stories. Exploited flaws first.
| CVE | CVSS | Severity | Product | Summary | Published |
|---|---|---|---|---|---|
| CVE-2026-82329exploited | 9.8 | critical | artifactory | JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthentica | 8d ago |
| CVE-2026-66384exploited | 5.3 | medium | artifactory | An authenticated user may write data outside the intended Docker cache path under specific remote-repository condi | 24d ago |
Threat actors are exploiting a newly patched critical security flaw impacting JFrog Artifactory merely days after public disclosure, according to watchTowr. The vulnerability in question is CVE-2026-82329 (CVSS score: 9.8), a case of authentication bypass that could lead to administrative access in Artifactory. "JFrog Artifactory contains an authentication weakness that, under default
Exploitation of the authentication bypass vulnerability CVE-2026-82329 started just days after its public disclosure. The post Critical JFrog Artifactory Vulnerability Reportedly Exploited in the Wild appeared first on SecurityWeek.
Two Artifactory flaws allowed attackers to poison package metadata across software repositories