JFrog CVEs
Every JFrog vulnerability SECBORN has reported on, with live CVSS severity, CISA known-exploited status and EPSS exploit odds.
2 CVEs
EPSSCoverage
8.1CVSS 3.1
CVE-2026-42016
Exploited
Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalation
JFrog · Artifactory
EPSS
8.6%
1 story
2 months ago
7.5CVSS 3.1
CVE-2026-42018
Exploited
Anonymous user token generation exposure in JFrog Artifactory
JFrog · Artifactory
EPSS
10.0%
1 story
2 months ago
Scores and exploit data come from the CVE Program, NVD, CISA and FIRST.org. Each CVE links to SECBORN's reporting on it.