Skip to content
Exploit Radar Choose my productsProducts My radar

Products › Brands

Brand

JFrog: actively exploited vulnerabilities

4 vulnerabilities in JFrog products (Artifactory) are in CISA’s catalog of exploited vulnerabilities, 4 of them added in the last 90 days. Last added: September 11, 2026.

JFrog security advisories

The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).

By category

Add just one JFrog category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

  • Artifactory4 vulnerabilities, Development and CI/CD

Name used by CISA: JFrog. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this JFrog list.

  1. Rank 1

    JFrog ArtifactoryCVE-2026-42016

    JFrog Artifactory Incorrect Authorization Vulnerability

    Recently added

    CVSS severity 8.8high

    Added Sep 11, 2026

  2. Rank 2

    JFrog ArtifactoryCVE-2026-42018

    JFrog Artifactory Improper Authentication Vulnerability

    Recently added

    CVSS severity 7.5high

    Added Sep 11, 2026

  3. Rank 3

    JFrog ArtifactoryCVE-2026-82329

    JFrog Artifactory Improper Authentication Vulnerability

    Hunt for compromise (CISA)

    CVSS severity 9.8critical

    Added Sep 2, 2026

  4. Rank 4

    JFrog ArtifactoryCVE-2026-66384

    JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability

    CVSS severity 5.3medium

    Added Aug 27, 2026

Follow and verify

Indicative classification, based on the vendor and product names given by CISA. How products are classified.