Exploited vulnerability

CVE-2026-82329

TLP:CLEAR

JFrog Artifactory Improper Authentication Vulnerability

JFrog Artifactory contains an improper authentication vulnerability that under default configuration can allow an unauthenticated attacker with network access to obtain administrative privileges.

Facts

Vendor: JFrog
Product: Artifactory
CVSS: 9.8
EPSS (probability of exploitation within 30 days): 14.4 %
On CISA's Known Exploited Vulnerabilities list since: 2 September 2026
First known exploitation: 2 September 2026
CISA's deadline for US federal agencies: 5 September 2026
Weakness: CWE-287
First seen by Risk Letters: 28 August 2026

Members see which Nordic sectors the flaw hits, and what to do about it.

Get the full brief

Data: NVD (public domain), CISA KEV, FIRST EPSS, MITRE ATT&CK, AlienVault OTX. NVD