JFrog Artifactory: Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen, um Informationen offenzulegen, um Dateien zu manipulieren, und um Sicherheitsvorkehrungen zu umgehen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Criticalbsi:WID-SEC-2026-254813 linked CVEs
Open advisory with all CVEs
More on Artifactory
Other advisories
- CriticalCVE-2026-65924JFrog Artifactory: Mehrere Schwachstellen
- CriticalCVE-2026-66376JFrog Artifactory: Mehrere Schwachstellen
- CriticalCVE-2026-42018JFrog Artifactory: JFrog Artifactory Incorrect Authorization Vulnerability
- CriticalCVE-2026-82329JFrog Artifactory: Schwachstelle ermöglicht Erlangen von Administratorrechten
- CriticalCVE-2026-82329JFrog Artifactory: JFrog Artifactory Improper Authentication Vulnerability
- CriticalCVE-2026-82329jfrog artifactory: unzureichende Authentifizierung
- CriticalCVE-2026-82329jfrog artifactory: unzureichende Authentifizierung
- CriticalCVE-2026-66384JFrog Artifactory: JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability
Other news entries
- Three JFrog Artifactory Flaws Exploited for Backdoor DeploymentNewsSecurityWeek
- CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEVNewsThe Hacker News
- More JFrog Artifactory bugs under attack, and all 3 have patchesNewsThe Register — Security
- Artifactory flaws chained in attacks deploying backdoor malwareNewsBleepingComputer
- Attackers Chain JFrog Artifactory Flaws to Gain Admin Control and Plant BackdoorsNewsThe Hacker News
- OpenAI's Artifactory opened covert data-stealing channel alongside Hugging Face attackNewsThe Register — Security
- Hackers exploit critical JFrog Artifactory flaw to forge admin tokensNewsBleepingComputer
- Exploited JFrog Artifactory bug puts software supply chain on alertNewsCSO Online
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2548
ID