AR
Product
artifactory
On CISA KEVExploited in the wild
75
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 27Medium 38Low 3
Watch
Add artifactory to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-82329 In wildKEV | 9.8 | Aug 28 | Potential authentication bypass leading to administrative access in Artifactory Affected: before 7.111.21; 7.117.0 before 7.117.28; 7.125.0 before 7.125.20; 7.133.0 before 7.133.29; 7.146.0 before 7.146.38; 7.161.0 before 7.161.20 |
| CVE-2026-42016 In wildKEV | 8.8 | Jul 27 | Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalation Affected: before 7.133.11 |
| CVE-2026-42018 In wildKEV | 7.5 | Aug 12 | Anonymous user token generation exposure in JFrog Artifactory Affected: before 7.111.20; 7.117.0 before 7.117.27; 7.125.0 before 7.125.19; 7.133.0 before 7.133.28; 7.146.0 before 7.146.8 |
| CVE-2026-66384 In wildKEV | 5.3 | Aug 12 | Authenticated users may write data outside the intended Docker cache path Affected: before 7.146.35; 7.161.0 before 7.161.16 |
Showing 4