CVE-2026-82329

Published: Aug 28, 2026Modified: Sep 2, 2026CISA KEV

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: reefs@jfrog.com (Secondary)

Description

JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges.

Affected (6)

Products: Jfrog: Artifactory

Jfrog

1 product

Artifactory

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Jfrog Artifactory	From 7.111.4 to 7.111.21
Jfrog Artifactory	From 7.117.0 to 7.117.28
Jfrog Artifactory	From 7.125.0 to 7.125.20
Jfrog Artifactory	From 7.133.0 to 7.133.29
Jfrog Artifactory	From 7.146.0 to 7.146.38
Jfrog Artifactory	From 7.161.0 to 7.161.20

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (3)

https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases

Source: reefs@jfrog.com

Release Notes

https://docs.jfrog.com/releases/docs/jfrog-security-advisories

Source: reefs@jfrog.com

Vendor Advisory

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-82329

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.