Security1 hSeptember 24, 2026, 07:40

CISA adds JFrog Artifactory auth bypass to exploited vulnerabilities list

CISA added CVE-2026-82329 (CVSS 9.8) to its Known Exploited Vulnerabilities catalog: an authentication bypass in self-hosted JFrog Artifactory grants admin access without credentials. Chained with CVE-2026-42018 and CVE-2026-42016, it enables full instance takeover and supply chain poisoning.

DEV Community

Open source

CISA adds JFrog Artifactory auth bypass to exploited vulnerabilities list

CVE-2026-82329: CVSS 9.8 auth bypass in self-hosted Artifactory
Empty join key yields a predictable 32-byte token signing key
Chain with CVE-2026-42018 and CVE-2026-42016 reaches admin control
Fix: versions 7.161.20 and 7.133.11+, plus token and key rotation

#JFrog#Artifactory#CISA

Red Hat warns AI is driving a surge in cyber threats and faster exploits

Security

FBI: fake cop scams cost victims $1.6 billion

Security

Chinese authorities reportedly hold F-35 components in Hong Kong

Security

CISA adds JFrog Artifactory auth bypass to exploited vulnerabilities list

Red Hat warns AI is driving a surge in cyber threats and faster exploits

FBI: fake cop scams cost victims $1.6 billion

Chinese authorities reportedly hold F-35 components in Hong Kong

CISA outlines improvement plan for CVE program