Vendor Exploitation Record

JFrog (Artifactory) — Known Exploited Vulnerabilities

4 in CISA KEV · 0 ransomware-linked · as of 2026-10-01
In CISA KEV4 confirmed exploited
Ransomware-linked0 (0% of KEV, per CISA)
First KEV addition2026-08-27
Most recent2026-09-11

How we count

Every figure on this page is a direct count of entries in CISA’s Known Exploited Vulnerabilities catalog attributed by CISA to JFrog (KEV field vendorProject), refreshed daily. “Ransomware-linked” counts entries CISA marks as known to be used in ransomware campaigns; the remainder are “unknown” to CISA, not confirmed ransomware-free. A KEV listing means the vulnerability has been observed exploited in the wild. Snapshot as of 2026-10-01.

Exploited JFrog vulnerabilities (CISA KEV)

CVEProductVulnerabilityAdded
CVE-2026-42016ArtifactoryJFrog Artifactory Incorrect Authorization Vulnerability2026-09-11
CVE-2026-42018ArtifactoryJFrog Artifactory Improper Authentication Vulnerability2026-09-11
CVE-2026-82329ArtifactoryJFrog Artifactory Improper Authentication Vulnerability2026-09-02
CVE-2026-66384ArtifactoryJFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability2026-08-27

← All vendors by exploited-vulnerability count

🤖 Generated by defend.network from the CISA KEV catalog. Counts are deterministic aggregates of official CISA data; verify individual advisories at the linked sources.