Jfrog vulnerabilities
65 published CVEs name Jfrog among the affected products; CISA lists 4 of them as exploited in the wild.
- 65Published CVEs65 of them scored
- 45Last 12 monthspublished in the last year
- 6Critical21 more rated high
- 4Known exploitedin CISA's KEV catalog
Known exploited
Newest addition to KEV first.
- CVE-2026-42018
Anonymous user token generation exposure in JFrog Artifactory
jfrog · artifactory
ExploitedHigh7.5 - CVE-2026-42016
Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalation
jfrog · artifactory
ExploitedHigh8.1 - CVE-2026-82329
Potential authentication bypass leading to administrative access in Artifactory
jfrog · artifactory
ExploitedCritical9.8 - CVE-2026-66384
Authenticated users may write data outside the intended Docker cache path
jfrog · artifactory
ExploitedMedium5.3