Login Request a demo
AR
Product
artifactory
by jfrog · last CVE Aug 28, 2026
On CISA KEVExploited in the wild
75
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities75In the news12Timeline
Severity mix
Critical 7High 27Medium 38Low 3
Severity
All severities75Critical7High27Medium38Low3
Exploitation
On CISA KEV4Exploited in the wild4
Watch

Add artifactory to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-42016
In wildKEV
8.8
9%
Jul 27
Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalation
Affected: before 7.133.11
CVE-2026-42018
In wildKEV
7.5
10%
Aug 12
Anonymous user token generation exposure in JFrog Artifactory
Affected: before 7.111.20; 7.117.0 before 7.117.27; 7.125.0 before 7.125.19; 7.133.0 before 7.133.28; 7.146.0 before 7.146.8
Showing 2