CVE-2026-82329

9.8 criticalKEVEPSS 14%

Critical (9.8) in JFrog Artifactory. In CISA KEV since 2026-09-02. EPSS 14% chance of exploitation in the next 30 days.

JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 14% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
CISA KEV: listed 2026-09-02, due 2026-09-05
CWE: CWE-287
Published: 2026-08-28
Modified: 2026-09-03
Record from: the NVD, synced 2026-10-19

Affected

jfrog:artifactory

References

https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases
https://docs.jfrog.com/releases/docs/jfrog-security-advisories
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-82329

Check your stack JSON