🔥 This vulnerability is being actively exploited in the wild (CISA Known Exploited Vulnerabilities catalog)
CVE-2026-82329: JFrog Artifactory Improper Authentication Vulnerability
Summary
JFrog Artifactory has an improper authentication vulnerability (a flaw in how the software checks whether users are who they claim to be) that allows attackers without valid credentials to gain admin access through its default configuration. This is being actively exploited by real attackers in the wild.
Solution / Mitigation
Apply mitigations according to vendor instructions from JFrog's security advisories at https://docs.jfrog.com/releases/docs/jfrog-security-advisories, following CISA's BOD 26-04 guidance for patching timelines and risk assessment. If mitigations are unavailable, discontinue use of the product.
Vulnerability Details
EPSS: 1.2%
Yes
🔥 Actively Exploited
September 1, 2026
Classification
Taxonomy References
Affected Vendors
Related Issues
CVE-2026-63086: text-generation-inference through 3.3.7 contains a server-side request forgery (SSRF) vulnerability in the OpenAI-compat
CVE-2026-34371: LibreChat is a ChatGPT clone with additional features. Prior to 0.8.4, LibreChat trusts the name field returned by the e
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-82329
First tracked: September 2, 2026 at 02:00 PM
Classified by LLM (prompt v3) · confidence: 85%