JFrog Artifactory Improper Authentication Vulnerability

概要

参考情報

• docs.jfrog.com/releases/docs/artifactory-self-managed-releases · Release Notes
• docs.jfrog.com/releases/docs/jfrog-security-advisories · Vendor Advisory
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• wiz.io/blog/artifactory-under-attack-in-the-wild-exploitation-of-cve-2026-42016-cve-2026-4201 · Third Party Advisory
• CISA KEV · CVE-2026-42018

artifactory のその他の脆弱性

• CVE-2026-82329緊急 9.8悪用確認済み（CISA KEV）JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network …
• CVE-2026-69106高 8.8A low-privileged user may poison cached artifact metadata under specific conditions, potentially causing consumers to retrieve untrusted con…
• CVE-2026-70547中 4.3An authenticated user without repository read permission may access package metadata under specific conditions.
• CVE-2026-69107中 5.9An unauthenticated user may access restricted artifacts in JFrog Artifactory under specific conditions.
• CVE-2026-69105高 8.1An unauthenticated attacker may cause untrusted package content to be cached under specific conditions, potentially affecting artifact integ…