[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$feL5qGHVmQZfrmOJPYD8YGpVWMqrYmLosGGgtCiK2XHo":3},{"article":4,"iocs":49,"watch_terms":57,"solutions":58,"lesson":154},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":26,"category":27,"article_tags":31},"036e6d9f-acdc-41c4-a06e-4021d6942f73","Critical JFrog Artifactory Vulnerability Reportedly Exploited in the Wild","critical-jfrog-artifactory-vulnerability-reportedly-exploited-in-the-wild-8d3d09","Exploitation of the authentication bypass vulnerability CVE-2026-82329 started just days after its public disclosure. The post Critical JFrog Artifactory Vulnerability Reportedly Exploited in the Wild appeared first on SecurityWeek.","A critical authentication bypass vulnerability, CVE-2026-82329, in JFrog Artifactory is reportedly being exploited in the wild shortly after its public disclosure. Attackers are reportedly using the flaw to gain administrative privileges by minting admin tokens. JFrog has released patches for cloud instances and advised self-hosted customers to update.","Critical JFrog Artifactory vulnerability CVE-2026-82329 is being exploited in the wild.","https:\u002F\u002Fwww.securityweek.com\u002Fcritical-jfrog-artifactory-vulnerability-reportedly-exploited-in-the-wild\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2024\u002F03\u002Fexploit.jpeg","2026-09-01T09:59:44+00:00","2026-09-01T10:00:10.87004+00:00",8,[17,20,23],{"name":18,"type":19},"JFrog Artifactory","product",{"name":21,"type":22},"JFrog","vendor",{"name":24,"type":25},"container image cache","technology","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":26,"icon":28,"name":29,"slug":30},null,"Vulnerabilities","vulnerabilities",[32,37,39,44],{"category":33},{"id":34,"icon":28,"name":35,"slug":36},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":38},{"id":26,"icon":28,"name":29,"slug":30},{"category":40},{"id":41,"icon":28,"name":42,"slug":43},"ade75414-7914-4e23-a450-48b64546ee70","Open Source","open-source",{"category":45},{"id":46,"icon":28,"name":47,"slug":48},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[50,54],{"type":51,"value":52,"context":53},"cve","CVE-2026-82329","Critical authentication bypass vulnerability in JFrog Artifactory.",{"type":51,"value":55,"context":56},"CVE-2026-66384","Previously exploited zero-day flaw in Artifactory, added to CISA KEV catalog.",[21,18],{"controls":59,"vendors":142},[60,89,114],{"slug":61,"name":62,"problem":63,"products":64},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[65,73,81],{"vendor_slug":66,"vendor_name":67,"vendor_logo":68,"product_slug":69,"product_name":70,"url":71,"description":72},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":74,"vendor_name":75,"vendor_logo":76,"product_slug":77,"product_name":78,"url":79,"description":80},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":82,"vendor_name":83,"vendor_logo":84,"product_slug":85,"product_name":86,"url":87,"description":88},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"slug":90,"name":91,"problem":92,"products":93},"patch-management","Automated patch management","Known holes get closed in days, not months.",[94,98,106],{"vendor_slug":82,"vendor_name":83,"vendor_logo":84,"product_slug":90,"product_name":95,"url":96,"description":97},"Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":99,"vendor_name":100,"vendor_logo":101,"product_slug":102,"product_name":103,"url":104,"description":105},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":107,"vendor_name":108,"vendor_logo":109,"product_slug":110,"product_name":111,"url":112,"description":113},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"slug":48,"name":115,"problem":116,"products":117},"Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",[118,126,134],{"vendor_slug":119,"vendor_name":120,"vendor_logo":121,"product_slug":122,"product_name":123,"url":124,"description":125},"google","Google","\u002Fvendor-logos\u002Fgoogle.png","google-threat-intelligence","Google Threat Intelligence","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fproducts\u002Fthreat-intelligence","Threat intelligence from Mandiant's frontline investigations, Google's threat analysts, open sources and Google's own visibility, in one service.",{"vendor_slug":127,"vendor_name":128,"vendor_logo":129,"product_slug":130,"product_name":131,"url":132,"description":133},"dataminr","Dataminr","\u002Fvendor-logos\u002Fdataminr.png","agentic-threat-intelligence-platform","Agentic Threat Intelligence Platform","https:\u002F\u002Fwww.dataminr.com\u002Fproducts\u002Fcyber-defense\u002Fagentic-threat-intelligence-platform\u002F","Threat intelligence platform, formerly ThreatConnect TI Ops, that collects, scores and structures intelligence and pushes it into security tools.",{"vendor_slug":135,"vendor_name":136,"vendor_logo":137,"product_slug":138,"product_name":139,"url":140,"description":141},"defused","Defused","\u002Fvendor-logos\u002Fdefused.png","defused-tf","Defused TF","https:\u002F\u002Fdefusedcyber.com\u002Fproduct\u002Ftf","Threat intelligence feed from honeypots Defused runs on several continents, showing which vulnerabilities attackers are exploiting right now, with payloads and indicators.",[143,148],{"slug":144,"name":21,"logo_path":145,"roles":146},"jfrog","\u002Fvendor-logos\u002Fjfrog.png",[147],"affected",{"slug":149,"name":150,"logo_path":151,"roles":152},"watchtowr","watchTowr","\u002Fvendor-logos\u002Fwatchtowr.png",[153],"reported_by",{"slug":155,"title":156,"body":157,"framework_refs":158,"framework_notes":169},"jfrog-artifactory-auth-bypass-exploited-in-the-wild","JFrog Artifactory Auth Bypass Exploited in the Wild","A critical authentication bypass vulnerability (CVE-2026-82329) in JFrog Artifactory is being actively exploited shortly after public disclosure, allowing attackers to mint admin tokens and gain full administrative privileges without valid credentials. This incident highlights the dangerous window between vulnerability disclosure and patch deployment, particularly for self-hosted instances where patching is the customer's responsibility. Authentication bypass flaws in artifact repositories are especially severe, as Artifactory often sits at the heart of software supply chains, meaning compromise can cascade into poisoned build pipelines or stolen secrets. The rapid exploitation timeline underscores that threat actors monitor CVE disclosures closely and weaponize critical flaws within hours or days.",[159,160,161,162,163,164,165,166,167,168],"CIS Control 7: Continuous Vulnerability Management","CIS Control 5: Account Management","CIS Control 12: Network Infrastructure Management","NIST SP 800-53 SI-2: Flaw Remediation","NIST SP 800-53 AC-2: Account Management","NIST SP 800-53 AU-6: Audit Record Review","NIST CSF ID.AM-2: Software Asset Inventory","NIST CSF RS.MI-3: Newly Identified Vulnerabilities Mitigated","ITIL Change Management: Emergency Change Procedure","SSDF PW.4: Reuse Existing, Well-Secured Software",{}]