Jfrog Artifactory vulnerabilities
70 published vulnerabilities in Jfrog Artifactory, 4 of them exploited in the wild. The most were published in 2026 (38), and 38 so far in 2026.
Jfrog Artifactory vulnerabilities by year
2016
2018
2019
2020
2021
2022
2023
2024
2026
Most exploited Jfrog Artifactory vulnerabilities
- CVE-2026-82329 JFrog Artifactory Improper Authentication
- CVE-2026-42016 JFrog Artifactory Incorrect Authorization
- CVE-2026-42018 JFrog Artifactory Improper Authentication
- CVE-2026-66384 JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory
- CVE-2019-17444 JFrog Artifactory does not enforce default admin password change
- CVE-2018-19971 Missing authorization in n/a
- CVE-2019-9733 Auth bypass in n/a
- CVE-2016-10036 File upload in n/a
- CVE-2016-6501 Deserialization in n/a
- CVE-2023-42662 JFrog Artifactory Improper SSO Mechanism may lead to Exposure of Access Tokens
- CVE-2026-69106 Potential cache poisoning in JFrog Artifactory
- CVE-2026-42017 Privilege escalation via JFrog Worker event token exposure
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.