#artifactory

A research report published Thursday describes four weeks of active exploitation of JFrog...

Two JFrog Artifactory flaws chain from zero credentials to administrator control. This article covers the affected version branches, the observed post-exploitation sequence and the remediation order.

Hey all 👋 Here is a problem that sounds boring until you try it: move twenty-five container images...

Incident response guidance for a compromised artifact repository, using the September 2026 JFrog Artifactory exploitation as the case.

What ZoomEye's 17,881 observable JFrog Artifactory instances mean for the CVE-2026-82329 authentication bypass and perimeter checks.

How a default empty join key in JFrog Artifactory allowed unauthenticated attackers to mint administrator tokens, and what defenders should verify.

ZoomEye measurement of DevOps and data platform exposure, with interpretation of default-configuration risk.

Measuring internet-facing JFrog Artifactory exposure with ZoomEye to contextualize the CVE-2026-82329 authentication bypass.

ZoomEye fingerprints 17,877 internet-reachable JFrog Artifactory deployments. Here is what that measurement supports, and what it does not.

CVE-2026-82329 in JFrog Artifactory turned a default configuration gap into unauthenticated administrative access, with supply-chain consequences beyond the affected server.

JFrog Artifactory contains an incorrect authorization vulnerability that allows leads to privilege escalation attack due to a validation check of the token signature/issuer and not the token’s scope.

JFrog Artifactory contains an improper authentication vulnerability that could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources.