Jfrog Artifactory vulnerabilities
54 published CVEs name Jfrog Artifactory among the affected products; CISA lists 4 of them as exploited in the wild.
- 54Published CVEs54 of them scored
- 43Last 12 monthspublished in the last year
- 5Critical19 more rated high
- 4Known exploitedin CISA's KEV catalog
Known exploited
Newest addition to KEV first.
- CVE-2026-42018
Anonymous user token generation exposure in JFrog Artifactory
jfrog · artifactory
ExploitedHigh7.5 - CVE-2026-42016
Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalation
jfrog · artifactory
ExploitedHigh8.1 - CVE-2026-82329
Potential authentication bypass leading to administrative access in Artifactory
jfrog · artifactory
ExploitedCritical9.8 - CVE-2026-66384
Authenticated users may write data outside the intended Docker cache path
jfrog · artifactory
ExploitedMedium5.3