J
Vendor security profile4 actively exploited CVEs
jfrog
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs46
Critical2
CISA KEV4
Public exploit6
Patch rate%0
Avg. CVSS6.6
12-month vulnerability rate
0
0
0
0
0
0
0
0
13
30
0
1
CVE KEV
CVE severity distribution
46toplam CVE
Critical2 (4%)
High18 (39%)
Medium24 (52%)
Low2 (4%)
Patch and exploitation view
%0
Verified patch
%9
CISA KEV
%13
Public exploit
0Patch available
0Partial
2Workaround
0Vendor: no patch
44Unknown
Latest vulnerabilities
9.0
CVE-2026-92892
Potential command execution on the host running JFrog CLI.
J
Patch status unknown
9.8
CVE-2026-82329 Actively exploited
Potential authentication bypass leading to administrative access in Artifactory
J
Patch status unknownEPSS %14
6.5
CVE-2026-70550
Potential unauthorized access to private Composer repository metadata in JFrog Artifactory
J
Patch status unknownEPSS %0
3.5
CVE-2026-70548
SSRF In CocoaPods Via JFrog Artifactory External Dependency
J
Patch status unknownEPSS %0
7.6
CVE-2026-69104
Potential unauthorized repository migration in JFrog Artifactory
J
Patch status unknownEPSS %0
8.5
CVE-2026-70551
Server-Side Request Forgery Via VCS remote download in JFrog Artifactory
J
Patch status unknownEPSS %0
8.8
CVE-2026-69106
Potential cache poisoning in JFrog Artifactory
J
Patch status unknownEPSS %1
7.5
CVE-2026-42018 Actively exploited
Anonymous user token generation exposure in JFrog Artifactory
J
WorkaroundEPSS %10
5.9
CVE-2026-69107
Potential unauthorized artifact access in JFrog Artifactory
J
Patch status unknownEPSS %0
8.1
CVE-2026-69105
Potential package cache integrity issue in JFrog Artifactory
J
Patch status unknownEPSS %0