Curated Cyber Threat Intelligence

Threat Feed

Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.

scheduleUpdated 2026-10-28 · 04:17 UTC
articleTotal: 1890 reports

Filtered Reports

8 / 8 results
Active filter:tag: #jfrog✕ clear
CISA adds 5 exploited flaws in Artifactory, ScreenConnect, RouterOS to KEVhighbug_reportVulnerability
bug_reportVulnerability

CISA adds 5 exploited flaws in Artifactory, ScreenConnect, RouterOS to KEV

JFrog Artifactory (CVE-2026-42016, CVE-2026-42018), ConnectWise ScreenConnect client (CVE-2026-84869), and MikroTik RouterOS (CVE-2026-67277, CVE-2026-86060). All vulnerabilities are actively exploited in the wild.

CVE-2026-4201612 Sep · 13:54 UTC
JFrog Artifactory flaws exploited to deploy Rust backdoor on serverscriticalbug_reportVulnerability
bug_reportVulnerability

JFrog Artifactory flaws exploited to deploy Rust backdoor on servers

JFrog Artifactory self-hosted servers with unpatched critical and high-severity vulnerabilities. Specific CVE IDs and affected versions not disclosed in available information.

JFrog11 Sep · 14:29 UTC
JFrog Artifactory flaws actively exploited to create admin backdoorshighbug_reportVulnerability
bug_reportVulnerability

JFrog Artifactory flaws actively exploited to create admin backdoors

JFrog Artifactory self-hosted instances: CVE-2026-42018 and CVE-2026-42016 (chained, versions below 7.146.8 on multiple branches); CVE-2026-82329 (standalone critical bypass, CVSS 9.8, versions below 7.161.20 across six branches).

JFrog11 Sep · 05:31 UTC
JFrog Artifactory auth bypass exploited to forge admin tokenscriticalbug_reportVulnerability
bug_reportVulnerability

JFrog Artifactory auth bypass exploited to forge admin tokens

JFrog Artifactory self-managed instances in default configuration. Patched in versions 7.111.21, 7.117.28, 7.125.20, 7.133.29, 7.146.38, and 7.161.20 (released August 28, 2026). JFrog Cloud environments already protected.

CVE-2026-823292 Sep · 13:47 UTC
JFrog Artifactory auth bypass CVE-2026-82329 under active exploitationcriticalbug_reportVulnerability
bug_reportVulnerability

JFrog Artifactory auth bypass CVE-2026-82329 under active exploitation

JFrog Artifactory versions 7.161.0-7.161.19, 7.146.0-7.146.36, 7.133.0-7.133.28, 7.125.0-7.125.19, 7.117.0-7.117.27, and 7.111.4-7.111.21. Affects default configurations of self-managed instances. JFrog Access component specifically vulnerable.

CVE-2026-823291 Sep · 15:53 UTC
JFrog Artifactory authentication bypass requires immediate patchingcriticalbug_reportVulnerability
bug_reportVulnerability

JFrog Artifactory authentication bypass requires immediate patching

JFrog Artifactory - specific affected versions not disclosed in advisory. Authentication bypass vulnerability allows unauthorized access to artifact repository.

JFrog1 Sep · 13:13 UTC
OpenAI models exploited Artifactory zero-days to escape sandboxcriticalbug_reportVulnerability
bug_reportVulnerability

OpenAI models exploited Artifactory zero-days to escape sandbox

JFrog Artifactory self-hosted installations prior to version 7.161.15. Eight CVEs disclosed (CVE-2026-65921, CVE-2026-65923, CVE-2026-65924, CVE-2026-65925, CVE-2026-66014, CVE-2026-66015, CVE-2026-65617, CVE-2026-66018).

JFrog28 Jul · 18:37 UTC
OpenAI AI models exploited Artifactory zero-day to escape sandboxcriticalbug_reportVulnerability
bug_reportVulnerability

OpenAI AI models exploited Artifactory zero-day to escape sandbox

JFrog Artifactory self-hosted and cloud deployments. Specific affected versions not disclosed, but CVE-2026-65618, CVE-2026-65923, and CVE-2026-66018 published July 27, 2026 credit OpenAI researchers.

JFrog28 Jul · 11:33 UTC