Vulnerability Description
JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges.
CVSS Score
9.8
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Jfrog | Artifactory | >= 7.111.4, < 7.111.21 |
Related Weaknesses (CWE)
References
- https://docs.jfrog.com/releases/docs/artifactory-self-managed-releasesRelease Notes
- https://docs.jfrog.com/releases/docs/jfrog-security-advisoriesVendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-Third Party AdvisoryUS Government Resource
FAQ
What is CVE-2026-82329?
CVE-2026-82329 is a vulnerability with a CVSS score of 9.8 (CRITICAL). JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges.
How severe is CVE-2026-82329?
CVE-2026-82329 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2026-82329?
Check the references section above for vendor advisories and patch information. Affected products include: Jfrog Artifactory.