Known Exploited Vulnerabilities September 11, 2026 · CISA KEV Catalog

CVE-2026-42016: JFrog Artifactory Incorrect Authorization Vulnerability

JFrog Artifactory contains an incorrect authorization vulnerability that leads to a privilege escalation attack due to a validation check of the token signature/issuer and not the token’s scope.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-42016 JFrog
Related: CVE-2026-42018: JFrog Artifactory Improper Authentication Vulnerability Known Exploited Vulnerabilities · Sep 11, 2026
CVE-2026-82329: JFrog Artifactory Improper Authentication Vulnerability Known Exploited Vulnerabilities · Sep 02, 2026
CVE-2026-66384: JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability Known Exploited Vulnerabilities · Aug 27, 2026