Artifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329

As cited

Copy frozen at 2026-09-10 21:39 UTC (site build).

vulnerabilities

Artifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329

Wiz Research identified active exploitation of three critical and high-severity vulnerabilities in JFrog Artifactory (CVE-2026-42016, CVE-2026-42018, and CVE-2026-82329). Attackers chain these flaws to circumvent authentication controls and obtain administrative privileges.

Why it matters: Organizations running Artifactory need immediate detection and patching to prevent attackers from gaining repository access, which could lead to supply chain compromise or lateral movement within the environment.

Source published

2026-09-10 19:04 UTC

First seen by Cybersecurity Tracker

2026-09-10 21:13 UTC