{"data":{"id":"93af0c3e-ac50-465a-8757-a0c759e8dd4a","title":"CVE-2026-82329: JFrog Artifactory Improper Authentication Vulnerability","summary":"JFrog Artifactory has an improper authentication vulnerability (a flaw in how the software checks whether users are who they claim to be) that allows attackers without valid credentials to gain admin access through its default configuration. This is being actively exploited by real attackers in the wild.","solution":"Apply mitigations according to vendor instructions from JFrog's security advisories at https://docs.jfrog.com/releases/docs/jfrog-security-advisories, following CISA's BOD 26-04 guidance for patching timelines and risk assessment. If mitigations are unavailable, discontinue use of the product.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-82329","publishedAt":"2026-09-02T00:00:00.000Z","cveId":"CVE-2026-82329","cweIds":["CWE-287"],"cvssScore":null,"cvssSeverity":null,"severity":"critical","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":["HuggingFace"],"affectedVendorsRaw":["JFrog Artifactory"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"active","epssScore":0.01242,"patchAvailable":true,"disclosureDate":"2026-09-02T00:00:00.000Z","capecIds":["CAPEC-114"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":["AML.T0010"]}}