Skip to content
OpenAdvisories

Vendor

jfrog

65 known vulnerabilities.

Products

artifactory 54 JFrog Artifactory 8 jfrog-cli 1 Artifactory (Workers) 1 Artifactory Self-Hosted 1 Artifactory < 7.68.19 0 Artifactory < 7.63.18 0 Artifactory < 7.59.18 0 Artifactory < 7.66.0 0 Artifactory < 7.46.3 0 Artifactory < 6.23.41 0 Artifactory < 7.37.13 0
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-42018 Exploited Scanner template

    Anonymous user token generation exposure in JFrog Artifactory

    JFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources.

    jfrog artifactory
    KEV Sep 11, 2026
  • High 8.1
    CVE-2026-42016 Exploited Public exploit Scanner template

    Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalation

    JFrog Artifactory (Self Hosted) versions before 7.133.11 are vulnerable to a privilege escalation attack due to a validation check of the token signature/issuer and not the token’s scope.

    jfrog artifactory
    KEV Sep 11, 2026