CyberSIXT Search
JFrog product

artifactory

← All JFrog products

No CISA KEV deadline is open. CISA last added a artifactory CVE on 11 Sep.

Tracked since 20 Aug · latest article Mon 14 Sep · RSS

High exploit odds · current
0
EPSS top 5%, not in KEV
Articles · 7 days
0
none this week

Exploited, by due date

CSV download
CVEProductAddedDue · federal deadline

Deadlines passed

CVE-2026-42016Artifactory11 SepDeadline passed 25 Sep8 articles
CVE-2026-42018Artifactory11 SepDeadline passed 25 Sep7 articles
CVE-2026-82329Artifactory2 SepDeadline passed 5 Sep10 articles
CVE-2026-66384Artifactory27 AugDeadline passed 10 Sep3 articles

Coverage

18 articles · all timeFull timeline

18 articles from 8 outlets since 20 Aug; the latest 42 days ago.

artifactory: coverage over time18 articles from 8 outlets. First report 20 Aug by Infosecurity. Busiest week: 8 articles, week of 7 Sep. 0 in the last 7 days. artifactory: coverage over time18 articles from 8 outlets. First report 20 Aug by Infosecurity. Busiest week: 8 articles, week of 7 Sep. 0 in the last 7 days.
  • Article
  • First report
  • Official notice
Show as table
artifactory: articles
Published (UTC)OutletHeadline
Mon 14 Sep · 15:26 UTCSecurity AffairsCISA Flags Artifactory, ScreenConnect and GitLab Flaws as Exploited
Mon 14 Sep · 09:36 UTCSecurityWeekHackers Exploit JFrog Artifactory Bugs to Install Persistent Backdoors
Sun 13 Sep · 18:30 UTCSecurity AffairsSecurity Affairs Tracks Malware, Ransomware and Active Exploits
Sun 13 Sep · 15:00 UTCSecurity AffairsSecurity Weekly Roundup Covers Cisco, Chrome and Windows Attacks
Sat 12 Sep · 17:53 UTCThe Hacker NewsCISA Flags Artifactory, ScreenConnect and RouterOS Attacks
Fri 11 Sep · 20:32 UTCCISACISA Warns of Exploited JFrog Artifactory Authentication Flaw
Fri 11 Sep · 20:32 UTCCISACISA Warns of Actively Exploited JFrog Artifactory Flaw
Fri 11 Sep · 07:48 UTCThe Hacker NewsAttackers Chain JFrog Artifactory Flaws to Seize Admin Control
Fri 11 Sep · 01:30 UTCSecurityOnlineJFrog Artifactory Flaws Exploited to Seize Admin Control
Mon 7 Sep · 04:31 UTCSecurityOnlineCISA KEV Missed Four Actively Exploited AI and WordPress Flaws
Thu 3 Sep · 13:30 UTCSOCRadarJFrog Artifactory CVE-2026-82329 Exploited
Tue 1 Sep · 21:30 UTCDark ReadingAttackers Pounce on Critical Artifactory Flaw Following Disclosure
Tue 1 Sep · 10:36 UTCSecurityWeekCritical JFrog Artifactory Vulnerability Reportedly Exploited in the Wild
Tue 1 Sep · 06:40 UTCSecurityOnlineCritical JFrog Artifactory flaw lets attackers gain admin access
Fri 28 Aug · 14:20 UTCSecurity AffairsCISA Adds ownCloud Linux Kernel and Artifactory Flaws to KEV List
Fri 28 Aug · 03:32 UTCSecurityOnlineCISA Warns of Exploited Flaws in ownCloud, Linux Kernel, and JFrog Artifactory
Thu 27 Aug · 20:53 UTCCISACISA warns of active exploit in JFrog Artifactory path traversal
Thu 20 Aug · 14:51 UTCInfosecurityCVE-2026-69106 flaw in JFrog Artifactory threatens supply chain

Who reported 8 outlets, last 12 months

  • Security Affairs4
  • SecurityOnline4
  • CISA3
  • SecurityWeek2
  • The Hacker News2
  • Infosecurity1
  • Dark Reading1
  • SOCRadar1
  1. CISA Flags Artifactory, ScreenConnect and GitLab Flaws as ExploitedSecurity Affairs
  2. Hackers Exploit JFrog Artifactory Bugs to Install Persistent BackdoorsSecurityWeek
  3. Security Affairs Tracks Malware, Ransomware and Active ExploitsSecurity Affairs
  4. Security Weekly Roundup Covers Cisco, Chrome and Windows AttacksSecurity Affairs
  5. CISA Flags Artifactory, ScreenConnect and RouterOS AttacksThe Hacker News
  6. CISA Warns of Exploited JFrog Artifactory Authentication FlawCISA · official notice
  7. CISA Warns of Actively Exploited JFrog Artifactory FlawCISA · official notice
  8. Attackers Chain JFrog Artifactory Flaws to Seize Admin ControlThe Hacker News
  9. JFrog Artifactory Flaws Exploited to Seize Admin ControlSecurityOnline
  10. CISA KEV Missed Four Actively Exploited AI and WordPress FlawsSecurityOnline

All CVEs in coverage

6
CVE-2026-82329JFrog Artifactory Improper Authentication VulnerabilityCVSS9.8CriticalExploited14%EPSS10articles
CVE-2026-42018JFrog Artifactory Improper Authentication VulnerabilityCVSS7.5HighExploited9.8%EPSS7articles
CVE-2026-42016JFrog Artifactory Incorrect Authorization VulnerabilityCVSS8.1HighExploited8.6%EPSS8articles
CVE-2026-66384JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory VulnerabilityCVSS5.3MediumExploited0.7%EPSS3articles
CVE-2026-69106Potential cache poisoning in JFrog ArtifactoryCVSS8.8High–Not in KEV0.5%EPSS1article
CVE-2026-65922jfrog artifactory vulnerabilityCVSS7.1High–Not in KEV0.3%EPSS1article
How these numbers are made

CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.

CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.

Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.

Product names are grouped by normalised names, with version and edition tails removed.

Fix listed refers to an advisory. Unknown fix status is counted as not listed.

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device