[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fIPeE0FFnNeoS5AvAGIQrqe8t0F_IBLCnZsCdNUDWOok":3},{"article":4,"iocs":55,"watch_terms":66,"solutions":67,"lesson":167},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"ca1b89e9-a038-4de8-ac0e-cd729a9f25fd","Attackers Chain JFrog Artifactory Flaws to Gain Admin Control and Plant Backdoors","attackers-chain-jfrog-artifactory-flaws-to-gain-admin-control-and-plant-backdoor-6d77d0","Attackers have chained two flaws in JFrog Artifactory, the repository that software build pipelines pull from, to take administrator control of self-hosted servers and plant backdoors, cloud security company Wiz said in a report. Wiz saw the attacks between August 15 and September 8. JFrog had fixed both flaws before then, so only servers that had not been updated were open to them.","Attackers exploited a chain of two vulnerabilities in JFrog Artifactory, a critical software build pipeline repository, to gain administrator control over self-hosted servers. The flaws, CVE-2026-42018 and CVE-2026-42016, allowed attackers to swap an anonymous user token for an administrator token, enabling them to plant backdoors and execute shell commands. A separate critical flaw, CVE-2026-82329, was also exploited to bypass authentication and gain administrator privileges.","Attackers chained two JFrog Artifactory flaws to gain admin control and plant backdoors.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F09\u002Fattackers-chain-jfrog-artifactory-flaws.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEgX61WXln9MMGAzqzflpRDt_LZGfB7ZJ_u1fsQhr5FRnml48-E-V-uxtCIF-GERZlt-eBhw3MDT7_6jFgwEDF1ppC7YZlB_CZn-q4_nKD9S3fQTI3kDQFe2Izsq6_NoGnCRtRZckr8Irg9kOJ8Fwghl3qHqwg1zWoN6ff-VsmlCaojw2Divb6L00F34lJk\u002Fs1600\u002Fjfrog-art.jpg","2026-09-11T07:31:05+00:00","2026-09-11T08:00:04.429808+00:00",9,[17,20,23,25,28,30],{"name":18,"type":19},"JFrog Artifactory","product",{"name":21,"type":22},"JFrog","vendor",{"name":24,"type":19},"Groovy plugins",{"name":26,"type":27},"Rust","technology",{"name":29,"type":22},"Wiz",{"name":31,"type":22},"Fastly","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":32,"icon":34,"name":35,"slug":36},null,"Vulnerabilities","vulnerabilities",[38,43,45,50],{"category":39},{"id":40,"icon":34,"name":41,"slug":42},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":44},{"id":32,"icon":34,"name":35,"slug":36},{"category":46},{"id":47,"icon":34,"name":48,"slug":49},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":51},{"id":52,"icon":34,"name":53,"slug":54},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[56,60,63],{"type":57,"value":58,"context":59},"cve","CVE-2026-42018","Flaw allowing unauthenticated anonymous-user token.",{"type":57,"value":61,"context":62},"CVE-2026-42016","Flaw allowing low-privilege token swap for admin scope.",{"type":57,"value":64,"context":65},"CVE-2026-82329","Critical authentication bypass flaw.",[21,29,31],{"controls":68,"vendors":156},[69,98,127],{"slug":70,"name":71,"problem":72,"products":73},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",[74,82,90],{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"beyondtrust","BeyondTrust","\u002Fvendor-logos\u002Fbeyondtrust.png","password-safe","BeyondTrust Password Safe","https:\u002F\u002Fwww.beyondtrust.com\u002Fproducts\u002Fpassword-safe","Privileged password and session management.",{"vendor_slug":83,"vendor_name":84,"vendor_logo":85,"product_slug":86,"product_name":87,"url":88,"description":89},"delinea","Delinea","\u002Fvendor-logos\u002Fdelinea.png","secret-server","Delinea Secret Server","https:\u002F\u002Fdelinea.com\u002Fproducts\u002Fsecret-server","Vault for privileged credentials with discovery, rotation and session recording.",{"vendor_slug":91,"vendor_name":92,"vendor_logo":93,"product_slug":94,"product_name":95,"url":96,"description":97},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","idira-privileged-access-management","Idira Privileged Access Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fhuman\u002Fprivileged-access-management","Privileged access management from the former CyberArk portfolio: vaulting, rotation, just-in-time access and session monitoring.",{"slug":99,"name":100,"problem":101,"products":102},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[103,111,119],{"vendor_slug":104,"vendor_name":105,"vendor_logo":106,"product_slug":107,"product_name":108,"url":109,"description":110},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":112,"vendor_name":113,"vendor_logo":114,"product_slug":115,"product_name":116,"url":117,"description":118},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":120,"vendor_name":121,"vendor_logo":122,"product_slug":123,"product_name":124,"url":125,"description":126},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"slug":128,"name":129,"problem":130,"products":131},"patch-management","Automated patch management","Known holes get closed in days, not months.",[132,140,148],{"vendor_slug":133,"vendor_name":134,"vendor_logo":135,"product_slug":136,"product_name":137,"url":138,"description":139},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":141,"vendor_name":142,"vendor_logo":143,"product_slug":144,"product_name":145,"url":146,"description":147},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":149,"vendor_name":150,"vendor_logo":151,"product_slug":152,"product_name":153,"url":154,"description":155},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",[157,162],{"slug":158,"name":21,"logo_path":159,"roles":160},"jfrog","\u002Fvendor-logos\u002Fjfrog.png",[161],"affected",{"slug":163,"name":29,"logo_path":164,"roles":165},"wiz","\u002Fvendor-logos\u002Fwiz.png",[166],"reported_by",{"slug":168,"title":169,"body":170,"framework_refs":171,"framework_notes":184},"chained-jfrog-artifactory-flaws-lead-to-admin-takeover-and-backdoor-implantation","Chained JFrog Artifactory Flaws Lead to Admin Takeover and Backdoor Implantation","Attackers exploited two chained vulnerabilities in JFrog Artifactory — a critical component of software build pipelines — to escalate from anonymous user access to full administrator control, ultimately planting backdoors and executing arbitrary shell commands. A third critical flaw further enabled authentication bypass, compounding the severity of the attack surface. The incident highlights the extreme danger of unpatched vulnerabilities in CI\u002FCD and artifact repository infrastructure, which sits at the heart of software supply chains. Because Artifactory manages trusted build artifacts, a compromised instance can serve as a launchpad for downstream supply chain attacks affecting every application built through it. Organizations running self-hosted instances must treat these systems as critical infrastructure requiring rapid patch cycles and strict access controls.",[172,173,174,175,176,177,178,179,180,181,182,183],"CIS Control 7: Continuous Vulnerability Management","CIS Control 5: Account Management","CIS Control 12: Network Infrastructure Management","CIS Control 8: Audit Log Management","NIST SP 800-53 SI-2: Flaw Remediation","NIST SP 800-53 AC-2: Account Management","NIST SP 800-53 AC-6: Least Privilege","NIST SP 800-53 AU-6: Audit Record Review and Analysis","NIST SP 800-161: Supply Chain Risk Management","NIST CSF ID.RA-1: Asset Vulnerabilities Identified","ITIL Change Management: Emergency Change Procedures","GDPR Article 32: Security of Processing (where PII transits build pipelines)",{}]