HIGHVulnerability
Verified
Global

CISA KEV: JFrog Artifactory — JFrog Artifactory Improper Authentication Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

JFrog Artifactory contains an improper authentication vulnerability that under default configuration can allow an unauthenticated attacker with network access to obtain administrative privileges.

Analysis

JFrog Artifactory contains an improper authentication vulnerability that under default configuration can allow an unauthenticated attacker with network access to obtain administrative privileges. Added to CISA Known Exploited Vulnerabilities catalog on 2026-09-02. Remediation due: 2026-09-05.

Indicators of Compromise (1)

CVE (1)
CVE-2026-82329
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on Sep 2, 2026. Verified by: CISA.

Related Threats

MEDIUMVulnerabilityNEW

Let’s Encrypt Cuts Default Certificate Validity to 64 Days Ahead of 45-Day Switch

Beginning February 2027, all newly issued certificates will have a 64-day validity period by default. The post Let’s Encrypt Cuts Default Certificate Validity to 64 Days Ahead of 45-Day Switch appeared first on SecurityWeek .

SecurityWeek
CRITICALVulnerability

NVD CRITICAL: CVE-2026-108804 — A vulnerability was detected in TRENDnet TEW-751DR, TEW-752DRU and TEW733GR 1.03...

A vulnerability was detected in TRENDnet TEW-751DR, TEW-752DRU and TEW733GR 1.03B01/1.03B03. Affected is the function fwrite of the file pigwidgeon.cgi of the component Web Management Backend. The manipulation of the argument service results in os command injection. It is possible to launch the attack remotely. The exploit is now public and may be used. The vendor confirms: "As this router was EOL

CVE-2026-108804
NIST NVD
MEDIUMVulnerability

SBI Group and Mesh prep digital asset JV

Japan's SBI Group is teaming up with crypto infrastructure provider Mesh Connect and Money Forward on a digital asset joint venture.

Finextra