CVE-2026-82329
JFrog Artifactory Improper Authentication Vulnerability
JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges.
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. Deadline for federal agencies: 2026-09-05.
10 articles across 6 outlets · first covered Sep 1, 2026 · latest Sep 14, 2026
Coverage timeline
-
Hackers Exploit JFrog Artifactory Bugs to Install Persistent Backdoorswww.securityweek.com · Sep 14, 2026
-
Security Affairs Tracks Malware, Ransomware and Active Exploitssecurityaffairs.com · Sep 13, 2026
-
Security Weekly Roundup Covers Cisco, Chrome and Windows Attackssecurityaffairs.com · Sep 13, 2026
-
Attackers Chain JFrog Artifactory Flaws to Seize Admin Controlthehackernews.com · Sep 11, 2026
-
JFrog Artifactory Flaws Exploited to Seize Admin Controlsecurityonline.info · Sep 11, 2026
-
CISA KEV Missed Four Actively Exploited AI and WordPress Flawssecurityonline.info · Sep 7, 2026
-
JFrog Artifactory CVE-2026-82329 Exploitedsocradar.io · Sep 3, 2026
-
Attackers Pounce on Critical Artifactory Flaw Following Disclosurewww.darkreading.com · Sep 1, 2026
-
Critical JFrog Artifactory Vulnerability Reportedly Exploited in the Wildwww.securityweek.com · Sep 1, 2026
-
Critical JFrog Artifactory flaw lets attackers gain admin accesssecurityonline.info · Sep 1, 2026