# Jfrog Artifactory


- [CVE-2026-82329](https://insights.sbomify.com/CVE-2026-82329/): JFrog Artifactory Improper Authentication (critical 9.8, exploited in the wild)
- [CVE-2026-42016](https://insights.sbomify.com/CVE-2026-42016/): JFrog Artifactory Incorrect Authorization (high 8.1, exploited in the wild)
- [CVE-2026-42018](https://insights.sbomify.com/CVE-2026-42018/): JFrog Artifactory Improper Authentication (high 7.5, exploited in the wild)
- [CVE-2026-66384](https://insights.sbomify.com/CVE-2026-66384/): JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory (medium 5.3, exploited in the wild)
- [CVE-2019-17444](https://insights.sbomify.com/CVE-2019-17444/): JFrog Artifactory does not enforce default admin password change (critical 9.8)
- [CVE-2018-19971](https://insights.sbomify.com/CVE-2018-19971/): Missing authorization in n/a (critical 9.8)
- [CVE-2019-9733](https://insights.sbomify.com/CVE-2019-9733/): Auth bypass in n/a (critical 9.8)
- [CVE-2016-10036](https://insights.sbomify.com/CVE-2016-10036/): File upload in n/a (critical 9.8)
- [CVE-2016-6501](https://insights.sbomify.com/CVE-2016-6501/): Deserialization in n/a (critical 9.8)
- [CVE-2023-42662](https://insights.sbomify.com/CVE-2023-42662/): JFrog Artifactory Improper SSO Mechanism may lead to Exposure of Access Tokens (critical 9.3)
- [CVE-2026-69106](https://insights.sbomify.com/CVE-2026-69106/): Potential cache poisoning in JFrog Artifactory (high 8.8)
- [CVE-2026-42017](https://insights.sbomify.com/CVE-2026-42017/): Privilege escalation via JFrog Worker event token exposure (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/products/jfrog/artifactory/