LIVE FEED

Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiperHardening a Personal Linux Server in an AfternoonMicrosoft 365 outage disrupts Outlook, Teams, and Copilot worldwideCheck Point patches zero-day root escalation flaw exploited against customersHackers Compromise 4,800 GitHub Accounts to Steal Cloud CredentialsHow to Put a Self-Hosted Service Behind SSO and Intrusion Blocking in an AfternoonBaker Tilly notifies clients of data breach at third-party provider

JFrog CVEs

Every JFrog vulnerability SECBORN has reported on, with live CVSS severity, CISA known-exploited status and EPSS exploit odds.

10Tracked CVEs 2Known exploited 0Critical 9.0+ 0Covered this week

All Known exploited Critical High This week

6 CVEs EPSSCoverage

8.1CVSS 3.1 CVE-2026-42016 Exploited Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalation JFrog · Artifactory EPSS 8.6% 1 story 2 months ago 7.5CVSS 3.1 CVE-2026-42018 Exploited Anonymous user token generation exposure in JFrog Artifactory JFrog · Artifactory EPSS 10.0% 1 story 2 months ago 8.8CVSS 3.1 CVE-2026-65617 Potential remote code execution on an Artifactory package service container. Jfrog · artifactory EPSS 0.65% 1 story 4 months ago 8.8CVSS 3.1 CVE-2026-65921 Potential path traversal leading to unauthorized file writes Jfrog · artifactory EPSS 0.59% 1 story 4 months ago 8.8CVSS 3.1 CVE-2026-66014 Potential authentication bypass leading to privilege escalation in Artifactory Jfrog · artifactory EPSS 0.64% 1 story 4 months ago 7.2CVSS 3.1 CVE-2026-66015 JFrog Platform contains an authorization flaw that may allow authenticated privilege escalation. Jfrog · artifactory EPSS 0.57% 1 story 4 months ago

Scores and exploit data come from the CVE Program, NVD, CISA and FIRST.org. Each CVE links to SECBORN's reporting on it.