CVE-2026-82329

CriticalKnown Exploited

JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network…

[email protected]·CWE-287·Published 2026-08-28

CVSS

9.8

EPSS

0.08

KEV

Yes

Exploits

Vendor statements (2)

docs.jfrog.com
docs.jfrog.com

cve.orgen

183 chars

JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	9.8	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
3.1	Secondary	NVD	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
3.1	Secondary	ENISA EUVD	9.8	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H