JFrog vulnerabilities
65 CVEs and advisories name JFrog as an affected vendor, 4 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-82329Potential authentication bypass leading to administrative access in Artifactory
- CVE-2026-42018Anonymous user token generation exposure in JFrog Artifactory
- CVE-2026-66384Authenticated users may write data outside the intended Docker cache path
- CVE-2026-42016Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalation