CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2026-420187.5/HIGHEPSS 10.0%CISA KEV
2026-08-12

JFrog Artifactory Authentication Bypass and Internal Token Exposure (CVE-2026-42018)

[Affected Scope] All JFrog Artifactory Self-Managed instances

[Impact] Unauthenticated attackers can obtain internal anonymous tokens even when anonymous access is disabled, leading to unauthorized access to sensitive artifacts

[Mitigation] Immediate upgrade to the latest patched version and verification of security configurations

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse