JFrog known exploited vulnerabilities
CISA's Known Exploited Vulnerabilities catalog lists 4 JFrog vulnerabilities: 4 added in the last 365 days, 1 rated critical (CVSS 9 or higher), and 0 with known ransomware use. The most recent was added Sep 11, 2026.
RSS feed for JFrog exploited vulnerabilities · Search them on KEVWire · Ask your AI assistant
| Added to KEV | CVE | Vulnerability | CVSS | EPSS | Federal due date | Ransomware use |
|---|---|---|---|---|---|---|
| 2026-09-11 | CVE-2026-42016 | JFrog Artifactory Incorrect Authorization Vulnerability | 8.1 (v3.1) | 8.6% | 2026-09-25 | Unknown |
| 2026-09-11 | CVE-2026-42018 | JFrog Artifactory Improper Authentication Vulnerability | 7.5 (v3.1) | 9.8% | 2026-09-25 | Unknown |
| 2026-09-02 | CVE-2026-82329 | JFrog Artifactory Improper Authentication Vulnerability | 9.8 (v3.1) | 14.4% | 2026-09-05 | Unknown |
| 2026-08-27 | CVE-2026-66384 | JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability | 5.3 (v3.1) | 0.7% | 2026-09-10 | Unknown |