Curated threat intel for security leaders
exploit 2026-09-10

Artifactory Under Attack: JFrog Vulnerabilities Exploited in-the-Wild

Artifactory Under Attack: JFrog Vulnerabilities Exploited in-the-Wild

Wiz Research identified in-the-wild exploitation of three critical vulnerabilities in JFrog Artifactory, compromising its security.

Bottom line: Wiz Research identified in-the-wild exploitation of three critical vulnerabilities in JFrog Artifactory, compromising its security.

What's happening: Attackers are chaining vulnerabilities in CVE-2026-42016, CVE-2026-42018, and CVE-2026-82329 to bypass authentication and gain administrative control. JFrog Artifactory versions 4.6.0 and earlier are affected. Exploitation was observed on May 31, 2023, in multiple US-based organizations, including a Fortune 500 company.

What to do: Immediately update JFrog Artifactory to version 4.6.1 or later, and monitor for signs of unauthorized access or activity. Verify that all dependencies are up-to-date, especially those affected by CVE-2026-42018. Conduct a thorough risk assessment and implement additional security controls to prevent similar attacks.

Source: Wiz Blog