Known Exploited Vulnerabilities September 11, 2026 · CISA KEV Catalog

CVE-2026-42018: JFrog Artifactory Improper Authentication Vulnerability

JFrog Artifactory contains an improper authentication vulnerability that could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-42018 JFrog
Related: CVE-2026-42016: JFrog Artifactory Incorrect Authorization Vulnerability Known Exploited Vulnerabilities · Sep 11, 2026
CVE-2026-82329: JFrog Artifactory Improper Authentication Vulnerability Known Exploited Vulnerabilities · Sep 02, 2026
CVE-2026-66384: JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability Known Exploited Vulnerabilities · Aug 27, 2026