CVE-2026-82329 CISA KEV · Actively exploitedSuited to automated attack · CISA
Potential authentication bypass leading to administrative access in Artifactory
CVSS score
9.8
EPSS probability
%14.1
Risk score
2.8
Published
1 mo ago
Related Security News
Articles and analysis bulletins in which the press and security publications have covered this vulnerability:
Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure
Threat actors are exploiting a newly patched critical security flaw impacting JFrog Artifactory merely days after public disclosure, according to watchTowr. The vulnerability in question is CVE-2026-82329 (CVSS score: 9.8), a case of authentication bypass that could lead to administrative access in Artifactory. "JFrog Artifactory contains an authentication weakness that, under default
Similar Vulnerabilities
7.5
CVE-2026-42018 Actively exploitedAnonymous user token generation exposure in JFrog Artifactory
Workaround Public Exploits:1EPSS %10
8.1
CVE-2024-34394libxmljs2 namespaces type confusion RCE
Patch status unknownEPSS %1
8.1
CVE-2024-34393libxmljs2 attrs type confusion RCE
Patch status unknownEPSS %1
5.3
CVE-2026-66384 Actively exploitedAuthenticated users may write data outside the intended Docker cache path
Patch status unknown Public Exploits:1EPSS %1
8.8
CVE-2026-65617Deserialization of untrusted data in Jfrog Artifactory
Patch status unknownEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-82329"