Exploited vulnerabilities
JFrog
4 JFrog vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.
In the catalogue4
Last 12 months4
In ransomware campaigns0
Last addition11 September 2026
The vulnerabilities4
- 11 September 2026CVE-2026-42018ArtifactoryJFrog Artifactory Improper Authentication Vulnerability
- 11 September 2026CVE-2026-42016ArtifactoryJFrog Artifactory Incorrect Authorization Vulnerability
- 2 September 2026CVE-2026-82329ArtifactoryJFrog Artifactory Improper Authentication Vulnerability
- 27 August 2026CVE-2026-66384ArtifactoryJFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability
Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.
Alerts only on the products you use
With My Defence you receive alerts and briefings only on the products you use, JFrog included.