Most Exploited Internet-Facing Products

MEIFP

Back to Ranking

jfrog

Products: artifactory

129.5

Score

4

CVEs

4

Active

0

PoC

4

KEV

#18

Rank

Period:

Product:

CVE ID	Published	CVSS	Exploit	KEV	AC	PR	Auto	Score(hover)	Affected Products	Description
CVE-2026-82329	2026-08-28	9.8v3.1	ACTIVE		Low	None	YES	40.6	artifactory	JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges.
CVE-2026-42018	2026-08-12	7.5v3.1	ACTIVE		Low	None	YES	40.6	artifactory	JFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources.
CVE-2026-66384	2026-08-12	5.3v3.1	ACTIVE		High	Low	no	22.0	artifactory	An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions.
CVE-2026-42016	2026-07-27	8.1v3.1	ACTIVE		Low	Low	no	26.4	artifactory	JFrog Artifactory (Self Hosted) versions before 7.133.11 are vulnerable to a privilege escalation attack due to a validation check of the token signature/issuer and not the token’s scope.

Each CVE: 10 pts base (Active only), boosted by:

KEV×2.0AC: Low×1.2PR: None×1.3PR: Low×1.1Auto×1.3