CVE-2026-82329-JFrog-Artifactory-

CVE-2026-82329-JFrog-Artifactory- CVE-2026-82329 — JFrog Artifactory Auth Bypass The Vulnerability Critical authentication bypass in JFrog Artifactory versions 7.111.20, 7.117.27, 7.125.19, 7.133.28, 7.146.37, 7.161.19. The flaw allows an unauthenticated attacker to forge a JWT using a blank HMAC...

JFrog Artifactory Access Blank Join Key Authentication Bypass

JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges. id: CVE-2026-82329 info: name: JFrog Artifactory Access Blank Join Key Authentication Bypass author: johnk3r,pruv...

JFrog Artifactory - Anonymous Token Disclosure via Trailing Slash Auth Bypass

JFrog Artifactory contains an information disclosure caused by returning an internal anonymous-user token to unauthenticated callers when anonymous access is disabled, letting unauthenticated attackers access sensitive resources. The exploit requires anonymous access to be disabled. id:...

JFrog_CVE-2026-65615-ByGLM

JFrog Artifactory 预认证 RCE 全链复现（CVE-2026-42018 / CVE-2026-65616 / CVE-2026-65615） 仅供授权安全测试、防御研究与安全教学使用。该漏洞链已被厂商修复（建议升级至 7.161.15+），请仅在一次性的隔离实验环境中复现。未经授权对他人系统实施本仓库所述任何操作均属违法行为，由此产生的一切后果由操作者自行承担。 本仓库为 edrabb.fr 披露的 JFrog Artifactory 预认证 RCE 漏洞链的完整复现交付物：基于官方镜像...

JFrog Artifactory 6.7.3 - Admin Login Bypass

JFrog Artifactory 6.7.3 is vulnerable to an admin login bypass issue because by default the access-admin account is used to reset the password of the admin account. While this is only allowable from a connection directly from localhost, providing an X-Forwarded-For HTTP header to the request allo...

CVE-2026-82329

CVE-2026-82329 — JFrog Artifactory Unauthenticated Authentication Bypass Mass Exploit -red.svg Critical Authentication Bypass CVSS 9.8 — Actively Exploited in the Wild This tool is a mass exploit for CVE-2026-82329, a vulnerability that allows an unauthenticated attacker with network access to...

CVE-2026-82329-poc

CVE-2026-82329 Artifactory Security Assessment Tool PoC dan alat validasi untuk mengidentifikasi instalasi JFrog Artifactory self-hosted yang terdampak CVE-2026-82329. Alat ini memvalidasi rantai autentikasi berikut: 1. Membuat join JWT HS256 menggunakan signing key default yang kosong. 2. Mengir...

rep-openai-artifactory

Forensis Lab — Forensic Recreation of the AI Agent Privilege Escalation JFrog Artifactory A safe, isolated, forensic recreation of the "Incidente Cero" OpenAI, May 2026: a sandboxed AI agent discovers the JFrog Artifactory package proxy, extracts credentials from its own configuration, improvises...

CVE-2026-82329-JFrog-Artifactory-Auth-Bypass

artifactory.py root@kitploit: ╔══════════════════════════════════════════════════════════╗ ║ artifactory · CVE-2026-82329 unauth admin takeover ║ ║ mitsec · https://x.com/ynsmroztas ║ ╚══════════════════════════════════════════════════════════╝ CVE-2026-82329 — JFrog Artifactory self-hosted...

cve-2026-82329-jfrog-artifactory

CVE-2026-82329 — JFrog Artifactory 未認証の認証バイパス → 管理者乗っ取り CVSS 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · CWE-287 · 2026-08-28 公開 · 実環境で悪用済み。 未認証のネットワーク隣接攻撃者が、デフォルト設定のセルフホスト型 JFrog Artifactory に対してプラットフォーム管理者アクセストークン を発行できます。このディレクトリには、再現可能な Docker ラボと、URL パラメータ化された検証用 PoC が含まれています。 artifactory-oss...

CVE-2026-82329-PoC-Exploit

CVE‑2026‑82329 – JFrog Artifactory Auth Bypass Toolkit ETHICAL USE ONLY – AUTHORIZED SECURITY TESTING This repository provides tools for authorized security professionals, blue teams, and penetration testers only. Unauthorized access to computer systems is illegal under CFAA US, Computer Misuse A...

Exploit for Improper Verification of Cryptographic Signature in Jfrog Artifactory

hpim-training-lab HPIM Training-Case Replication Lab Thi...

JFrog Artifactory < 7.146.35 Multiple Vulnerabilities

According to its self-reported version number, the version of JFrog Artifactory installed on the remote host is prior to 7.146.35. It is, therefore, affected by the following vulnerabilities. - An authentication weakness that, under default configuration, may allow an unauthenticated attacker wit...

JFrog Artifactory 7.161.x < 7.161.16 Multiple Vulnerabilities

According to its self-reported version number, the version of JFrog Artifactory installed on the remote host is 7.161.x prior to 7.161.16. It is, therefore, affected by the following vulnerabilities. - An authentication weakness that, under default configuration, may allow an unauthenticated...

Exploit for Improper Verification of Cryptographic Signature in Jfrog Artifactory

Incidente Cero — Forensic Lab: AI Agent Privilege Escalation...

Exploit for Improper Authentication in Jfrog Artifactory

CVE‑2026‑82329 – JFrog Artifactory Auth B...

JFrog Artifactory < 7.111.20 / 7.117.x < 7.117.27 / 7.125.x < 7.125.19 / 7.133.x < 7.133.28 / 7.146.x < 7.146.35 Improper Authentication

According to its self-reported version number, the version of JFrog Artifactory installed on the remote host is prior to 7.111.20, 7.117.x prior to 7.117.27, 7.125.x prior to 7.125.19, 7.133.x prior to 7.133.28, or 7.146.x prior to 7.146.35. It is, therefore, affected by an improper authenticatio...

JFrog Artifactory < 7.133.11 Privilege Escalation

According to its self-reported version number, the version of JFrog Artifactory installed on the remote host is prior to 7.133.11. It is, therefore, affected by a privilege escalation vulnerability. - JFrog Artifactory Self Hosted versions before 7.133.11 are vulnerable to a privilege escalation...

Exploit for CVE-2026-65615

JFrog Artifactory Pre-authenticated RCE Full Attack Chain CVE...

CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV

The U.S. Cybersecurity and Infrastructure Security Agency CISA has added five security flaws impacting JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS to its Known Exploited Vulnerabilities KEV catalog, following reports of active exploitation in the wild. Details of the...