CVE-2026-42018

creationtimestamp| type| source ---|---|--- 2026-08-18 06:52:55+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3mtdmybk5rd2b 2026-09-11 08:57:22+00:00| seen| https://bsky.app/profile/blackhatnews.tokyo/post/3mva74qcuco2s 2026-09-11 10:07:47+00:00| seen|...

CVE-2026-42018

JFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources...

CVE-2026-42018 Anonymous user token generation exposure in JFrog Artifactory

JFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources...

CVE-2026-42018

JFrog Artifactory is affected by an improper authentication vulnerability where it returns an internal anonymous-user token to unauthenticated callers when anonymous access is disabled. This behavior, facilitated by a trailing slash authentication bypass , allows attackers to obtain anonymous JWT...