CVE-2026-82329

Published: Aug 28, 2026Modified: Sep 3, 2026CISA KEV

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: reefs@jfrog.com (Secondary)

Description

JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges.

Affected (6)

Products: Jfrog: Artifactory

Jfrog

1 product

Artifactory

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Jfrog Artifactory	7.111.4 ≤ version < 7.111.21
Jfrog Artifactory	7.117.0 ≤ version < 7.117.28
Jfrog Artifactory	7.125.0 ≤ version < 7.125.20
Jfrog Artifactory	7.133.0 ≤ version < 7.133.29
Jfrog Artifactory	7.146.0 ≤ version < 7.146.38
Jfrog Artifactory	7.161.0 ≤ version < 7.161.20

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (3)

https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases

Source: reefs@jfrog.com

Release Notes

https://docs.jfrog.com/releases/docs/jfrog-security-advisories

Source: reefs@jfrog.com

Vendor Advisory

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-82329

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.