[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fg9iBklTlBI2Z6awhMfjnSsJ3HFmkJWUj90_v4BwO79E":3},{"article":4,"iocs":54,"watch_terms":65,"solutions":66,"lesson":162},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"9a11ca66-b428-40d7-aa4d-c3e9e7f134bd","Three JFrog Artifactory Flaws Exploited for Backdoor Deployment","three-jfrog-artifactory-flaws-exploited-for-backdoor-deployment-31900a","The vulnerabilities can allow attackers to bypass authentication and elevate their privileges to administrator. The post Three JFrog Artifactory Flaws Exploited for Backdoor Deployment appeared first on SecurityWeek.","Attackers are actively exploiting three high-severity vulnerabilities in JFrog Artifactory to compromise deployments, bypass authentication, and install backdoors. Two of the flaws, CVE-2026-42018 and CVE-2026-42016, have been chained together since mid-August to gain administrative privileges, while CVE-2026-82329 is being exploited for configuration exfiltration and persistent access. CISA has added these vulnerabilities to its Known Exploited Vulnerabilities catalog, urging federal agencies to patch.","Three JFrog Artifactory flaws are being exploited to deploy backdoors and gain admin privileges.","https:\u002F\u002Fwww.securityweek.com\u002Fthree-jfrog-artifactory-flaws-exploited-for-backdoor-deployment\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2025\u002F11\u002FNPM-code-software-development.jpeg","2026-09-14T09:27:29+00:00","2026-09-14T10:00:07.897443+00:00",9,[17,20,23,25,27,29],{"name":18,"type":19},"JFrog Artifactory","product",{"name":21,"type":22},"JFrog","vendor",{"name":24,"type":19},"Artifactory",{"name":26,"type":19},"SSH keys",{"name":28,"type":19},"plugins",{"name":30,"type":22},"Wiz","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":31,"icon":33,"name":34,"slug":35},null,"Vulnerabilities","vulnerabilities",[37,42,47,49],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":43},{"id":44,"icon":33,"name":45,"slug":46},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":48},{"id":31,"icon":33,"name":34,"slug":35},{"category":50},{"id":51,"icon":33,"name":52,"slug":53},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[55,59,62],{"type":56,"value":57,"context":58},"cve","CVE-2026-42016","Insufficient token validation issue exploited for privilege escalation.",{"type":56,"value":60,"context":61},"CVE-2026-42018","Improper authentication bug exploited to obtain an anonymous-user token.",{"type":56,"value":63,"context":64},"CVE-2026-82329","Authentication bypass exploited remotely without authentication to gain administrative privileges.",[21,30,18],{"controls":67,"vendors":151},[68,97,122],{"slug":69,"name":70,"problem":71,"products":72},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[73,81,89],{"vendor_slug":74,"vendor_name":75,"vendor_logo":76,"product_slug":77,"product_name":78,"url":79,"description":80},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":82,"vendor_name":83,"vendor_logo":84,"product_slug":85,"product_name":86,"url":87,"description":88},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":90,"vendor_name":91,"vendor_logo":92,"product_slug":93,"product_name":94,"url":95,"description":96},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"slug":98,"name":99,"problem":100,"products":101},"patch-management","Automated patch management","Known holes get closed in days, not months.",[102,106,114],{"vendor_slug":90,"vendor_name":91,"vendor_logo":92,"product_slug":98,"product_name":103,"url":104,"description":105},"Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":107,"vendor_name":108,"vendor_logo":109,"product_slug":110,"product_name":111,"url":112,"description":113},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":115,"vendor_name":116,"vendor_logo":117,"product_slug":118,"product_name":119,"url":120,"description":121},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"slug":123,"name":124,"problem":125,"products":126},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[127,135,143],{"vendor_slug":128,"vendor_name":129,"vendor_logo":130,"product_slug":131,"product_name":132,"url":133,"description":134},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","cortex-xdr","Cortex XDR","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcortex-xdr","Endpoint detection and response with extended detection across network, cloud and identity.",{"vendor_slug":136,"vendor_name":137,"vendor_logo":138,"product_slug":139,"product_name":140,"url":141,"description":142},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-edr","Huntress Managed EDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-edr","Endpoint detection and response monitored around the clock by Huntress analysts.",{"vendor_slug":144,"vendor_name":145,"vendor_logo":146,"product_slug":147,"product_name":148,"url":149,"description":150},"sentinelone","SentinelOne","\u002Fvendor-logos\u002Fsentinelone.png","singularity-endpoint","Singularity Endpoint","https:\u002F\u002Fwww.sentinelone.com\u002Fplatform\u002Fendpoint-security\u002F","Endpoint protection and detection with automated response and rollback.",[152,157],{"slug":153,"name":21,"logo_path":154,"roles":155},"jfrog","\u002Fvendor-logos\u002Fjfrog.png",[156],"affected",{"slug":158,"name":30,"logo_path":159,"roles":160},"wiz","\u002Fvendor-logos\u002Fwiz.png",[161],"reported_by",{"slug":163,"title":164,"body":165,"framework_refs":166,"framework_notes":179},"jfrog-artifactory-vulnerabilities-exploited-to-deploy-backdoors-via-auth-bypass-chain","JFrog Artifactory Vulnerabilities Exploited to Deploy Backdoors via Auth Bypass Chain","Attackers actively chained multiple high-severity vulnerabilities in JFrog Artifactory to bypass authentication, escalate to administrative privileges, and install persistent backdoors — a classic example of delayed patching enabling full system compromise. The fact that exploitation began in mid-August before CISA's KEV catalog listing suggests organizations lacked proactive vulnerability intelligence and timely patch cycles. JFrog Artifactory is a critical component in software supply chains, meaning a compromised instance can cascade into broader build pipeline and artifact integrity risks. CISA's involvement underscores that these are not theoretical threats — active exploitation against real deployments is confirmed and ongoing.",[167,168,169,170,171,172,173,174,175,176,177,178],"CIS Control 7: Continuous Vulnerability Management","CIS Control 6: Access Control Management","CIS Control 12: Network Infrastructure Management","CIS Control 8: Audit Log Management","NIST SP 800-53 SI-2: Flaw Remediation","NIST SP 800-53 AC-6: Least Privilege","NIST SP 800-53 AU-6: Audit Record Review","NIST SP 800-53 CM-6: Configuration Settings","NIST CSF ID.VM-1: Vulnerabilities are identified and documented","CISA KEV Catalog Binding Operational Directive 22-01","ITIL Change Management: Emergency Change Procedures","SSDF (NIST SP 800-218) PO.3: Implement Supporting Toolchains Securely",{}]