Skip to content

CVE · Exploited · On CISA KEV

CVE-2026-82329

JFrog Artifactory Improper Authentication Vulnerability

9.8
CVSS 3.1
1
story
SEP 2
added to KEV
Severity
9.8 Critical · vendor score
Vendor
JFrog
Product
Artifactory
Published
Aug 28, 2026
Added to KEV
Sep 2, 2026
KEV deadline
Sep 5, 2026
Ransomware use
Unknown
Weakness
CWE-287

What it is

JFrog Artifactory contains an improper authentication vulnerability that under default configuration can allow an unauthenticated attacker with network access to obtain administrative privileges.

From CISA's Known Exploited Vulnerabilities catalog

Decipher coverage · 1 story

Newest first ↑
  1. VulnerabilitiesCritical Artifactory Bug Under AttackCVE-2026-82329 is a simple authentication bypass that can allow an attacker to get admin privileges quite easilyDENNIS FISHER · 1 MIN

Official references

4 sources

Registries

RegistryNVDScore, weakness and every referenceRegistryCVE.orgThe official CVE recordRegistryCISA KEVKnown exploited, with the federal deadline

Advisories, fixes & analysis

Vendor advisorydocs.jfrog.com/releases/docs/jfrog-security-advisories