JFrog Artifactory 6.7.3 - Admin Login Bypass

JFrog Artifactory 6.7.3 is vulnerable to an admin login bypass issue because by default the access-admin account is used to reset the password of the admin account. While this is only allowable from a connection directly from localhost, providing an X-Forwarded-For HTTP header to the request allo...

JFrog Artifactory Access Blank Join Key Authentication Bypass

JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges. id: CVE-2026-82329 info: name: JFrog Artifactory Access Blank Join Key Authentication Bypass author: johnk3r,pruv...

CVE-2026-82329

CVE-2026-82329 — JFrog Artifactory 未认证身份验证绕过（批量利用） -red.svg 严重身份验证绕过（CVSS 9.8）— 已在野外被积极利用 该工具是 CVE-2026-82329 的批量利用 工具，该漏洞允许具有网络访问权限的未认证攻击者 在自托管 JFrog Artifactory 实例上获得完全管理权限 。支持单目标和多线程批量扫描。 ⚠️ 漏洞概述 属性| 值 ---|--- CVE ID| CVE-2026-82329 CVSS 评分| 9.8（严重） CWE| CWE‑287 – 身份验证不当 披露日期| 2026 年 8 月 28 日...

CVE-2026-82329-poc

CVE-2026-82329 Artifactory 安全评估工具 用于识别受 CVE-2026-82329 影响的 JFrog Artifactory 自托管安装的 PoC 与验证工具。 该工具验证以下认证链： 1. 使用空的默认签名密钥伪造 HS256 JWT。 2. 将 JWT 发送到 registry join 端点以获取 service token。 3. 将 service token 交换为具有管理员权限的 token。 4. 通过配置端点和 Artifactory token 验证管理员访问权限。...

CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added seven security flaws to its Known Exploited Vulnerabilities KEV catalog after they landed in attackers' crosshairs. The vulnerabilities are as follows - CVE-2026-83548 CVSS score: 10.0 - A server-side request forger...

CVE-2026-82329-JFrog-Artifactory-Auth-Bypass

artifactory.py root@kitploit: ╔══════════════════════════════════════════════════════════╗ ║ artifactory · CVE-2026-82329 未授权管理员接管 ║ ║ mitsec · https://x.com/ynsmroztas ║ ╚══════════════════════════════════════════════════════════╝ CVE-2026-82329 — JFrog Artifactory（自托管）未授权 join-JWT → SERVICE adm...

Lack of transparency in JFrog Artifactory

JFrog has identified a vulnerability in JFrog Artifactory. This vulnerability resides in the default configuration of JFrog Artifactory, where insufficient authentication controls are in place. As a result, an unauthenticated attacker can escalate their privileges to administrative level using...

cve-2026-82329-jfrog-artifactory

CVE-2026-82329 — JFrog Artifactory 未认证认证绕过 → 管理员接管 CVSS 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · CWE-287 · 披露于 2026-08-28 · 已在野外被利用。 未认证的、可访问网络的攻击者可针对默认自托管的 JFrog Artifactory 铸造一个平台管理员访问令牌 。此目录包含一个可复现的 Docker 实验环境和一个 URL 参数化的验证器 PoC。 已在 artifactory-oss 7.161.19 （存在漏洞，JFrog Access 7.191.11）与...

JFrog Artifactory Improper Authentication Vulnerability

JFrog Artifactory contains an improper authentication vulnerability that under default configuration can allow an unauthenticated attacker with network access to obtain administrative privileges...

Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure

Threat actors are exploiting a newly patched critical security flaw impacting JFrog Artifactory merely days after public disclosure, according to watchTowr. The vulnerability in question is CVE-2026-82329 CVSS score: 9.8, a case of authentication bypass that could lead to administrative access in...

JFrog Artifactory 7.161.x < 7.161.19 Multiple Vulnerabilities

According to its self-reported version number, the version of JFrog Artifactory installed on the remote host is 7.161.x prior to 7.161.19. It is, therefore, affected by multiple vulnerabilities, including: - A user who can read an existing remote VCS repository can replace its configured origin o...

JFrog Artifactory 7.146.x < 7.146.36 Multiple Vulnerabilities

According to its self-reported version number, the version of JFrog Artifactory installed on the remote host is 7.146.x prior to 7.146.36. It is, therefore, affected by multiple vulnerabilities: - A user who can read an existing remote VCS repository can replace its configured origin or supply an...

CVE-2026-82329

JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges...

CVE-2026-82329 Potential authentication bypass leading to administrative access in Artifactory

JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges...

CVE-2026-82329

CVE-2026-82329 is a critical authentication bypass in JFrog Artifactory (self-managed), rooted in the JFrog Access service. On default installations, a blank join key is silently trusted, and its HMAC secret is a fully known 32-byte value of 0x20. An unauthenticated attacker forges a valid join J...

EUVD-2026-67861

JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges...

CVE-2026-82329 Potential authentication bypass leading to administrative access in Artifactory

JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges...

PT-2026-83316

Name of the Vulnerable Software and Affected Versions JFrog Artifactory versions prior to 7.111.21 JFrog Artifactory versions prior to 7.117.28 JFrog Artifactory versions prior to 7.125.20 JFrog Artifactory versions prior to 7.133.29 JFrog Artifactory versions prior to 7.146.38 JFrog Artifactory...

VulnCheck KEV: CVE-2026-82329

JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges...

JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability

JFrog Artifactory contains an improper limitation of a pathname to a restricted directory vulnerability. This can allow an authenticated user to write data outside the intended Docker cache path under specific remote-repository conditions...