jfrog-CVE-2022-21449

CVE-2022-21449 Overview This tool allows to perform a quick scan of compiled code archives .jar, .war etc in order to check for vulnerability to CVE-2022-21449 by looking for the string indicating the use of ECDSA algorithm. The tool uses Python3 with no additional prerequisites. Usage python...

JFrog Artifactory Access Blank Join Key Authentication Bypass

JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges. id: CVE-2026-82329 info: name: JFrog Artifactory Access Blank Join Key Authentication Bypass author: johnk3r,pruv...

JFrog Artifactory - Unauthenticated Admin Token Minting via Token Scope Bypass

JFrog Artifactory Self-Hosted can disclose an anonymous token through the trailing-slash AWS token endpoint CVE-2026-42018, and affected releases can use that token to issue an administrator-scoped token without enforcing its scope CVE-2026-42016. id: CVE-2026-42016 info: name: JFrog Artifactory ...

JFrog Artifactory - Anonymous Token Disclosure via Trailing Slash Auth Bypass

JFrog Artifactory contains an information disclosure caused by returning an internal anonymous-user token to unauthenticated callers when anonymous access is disabled, letting unauthenticated attackers access sensitive resources. The exploit requires anonymous access to be disabled. id:...

Jfrog Artifactory <6.17.0 - Default Admin Password

Jfrog Artifactory prior to 6.17.0 uses default passwords such as "password" for administrative accounts and does not require users to change them. This may allow unauthorized network-based attackers to completely compromise of Jfrog Artifactory. id: CVE-2019-17444 info: name: Jfrog Artifactory...

JFrog_CVE-2026-65615-ByGLM

JFrog Artifactory Pre-Auth RCE Full Chain Reproduction CVE-2026-42018 / CVE-2026-65616 / CVE-2026-65615 For authorized security testing, defensive research, and security education only. This vulnerability chain has been fixed by the vendor upgrading to 7.161.15+ is recommended. Please reproduce...

CVE-2026-82329-JFrog-Artifactory-

CVE-2026-82329-JFrog-Artifactory- CVE-2026-82329 — JFrog Artifactory Auth Bypass The Vulnerability Critical authentication bypass in JFrog Artifactory versions 7.111.20, 7.117.27, 7.125.19, 7.133.28, 7.146.37, 7.161.19. The flaw allows an unauthenticated attacker to forge a JWT using a blank HMAC...

CVE-2026-82329-poc

CVE-2026-82329 Artifactory Security Assessment Tool PoC and validation tool to identify self-hosted JFrog Artifactory installations affected by CVE-2026-82329. This tool validates the following authentication chain: 1. Create an HS256 JWT join using the default empty signing key. 2. Send the JWT ...

CVE-2026-82329-JFrog-Artifactory-Auth-Bypass

artifactory.py ╔══════════════════════════════════════════════════════════╗ ║ artifactory · CVE-2026-82329 unauth admin takeover ║ ║ mitsec · https://x.com/ynsmroztas ║ ╚══════════════════════════════════════════════════════════╝ CVE-2026-82329 — JFrog Artifactory self-hosted unauthenticated...

JFrog Artifactory 6.7.3 - Admin Login Bypass

JFrog Artifactory 6.7.3 is vulnerable to an admin login bypass issue because by default the access-admin account is used to reset the password of the admin account. While this is only allowable from a connection directly from localhost, providing an X-Forwarded-For HTTP header to the request allo...

jfrog-CVE-2022-24675

CVE-2022-24675 tools Usage instructions cve202224675.sh rootfolder Will recursively walk the specified folder and report Golang binaries which use pem.Decode function, or are stripped in which case function name will be missed and the check will not be effective...

CVE-2026-82329-PoC-Exploit

CVE‑2026‑82329 – JFrog Artifactory Auth Bypass Toolkit ETHICAL USE ONLY – AUTHORIZED SECURITY TESTING This repository provides tools for authorized security professionals, blue teams, and penetration testers only. Unauthorized access to computer systems is illegal under CFAA US, Computer Misuse A...

CVE-2026-82329

CVE-2026-82329 — JFrog Artifactory Unauthenticated Authentication Bypass Mass Exploit -red.svg Critical Authentication Bypass CVSS 9.8 — Actively Exploited in the Wild This tool is a mass exploit for CVE-2026-82329, a vulnerability that allows an unauthenticated attacker with network access to...

PT-2026-147649

These are all security issues fixed in the jfrog-cli-2.132.0-1.1 package on the GA media of openSUSE Tumbleweed...

[SECURITY] Fedora 45 Update: jfrog-cli-2.127.0-1.fc45

JFrog CLI is a client that provides a simple interface that automates access to the JFrog products...

Fedora 45 : jfrog-cli (2026-22065c06f7)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-22065c06f7 advisory. Update to 2.127.0. ---- Update to 2.126.0. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note th...

Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.19.26 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.19.26 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.19.26 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-10836: Backport to odf-4.19.z Backport CephX keyType and rotation changes DFBUGS-10625: Backport to...

[SECURITY] Fedora 44 Update: jfrog-cli-2.127.0-1.fc44

JFrog CLI is a client that provides a simple interface that automates access to the JFrog products...

Fedora 44 : jfrog-cli (2026-22413fc041)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-22413fc041 advisory. Update to 2.127.0. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...

jfrog-cli-2.127.0-1.1 on GA media (moderate)

jfrog-cli-2.127.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:12130-1 Rating: moderate Cross-References: CVE-2026-92892 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...