CVE-2026-82329-JFrog-Artifactory-Auth-Bypass

artifactory.py root@kitploit: ╔══════════════════════════════════════════════════════════╗ ║ artifactory · CVE-2026-82329 unauth admin takeover ║ ║ mitsec · https://x.com/ynsmroztas ║ ╚══════════════════════════════════════════════════════════╝ CVE-2026-82329 — JFrog Artifactory self-hosted...

cve-2026-82329-jfrog-artifactory

CVE-2026-82329 — JFrog Artifactory 未认证认证绕过 → 管理员接管 CVSS 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · CWE-287 · 披露于 2026-08-28 · 已在野外被利用。 未认证的、可访问网络的攻击者可针对默认自托管的 JFrog Artifactory 铸造一个平台管理员访问令牌 。此目录包含一个可复现的 Docker 实验环境和一个 URL 参数化的验证器 PoC。 已在 artifactory-oss 7.161.19 （存在漏洞，JFrog Access 7.191.11）与...