Class familyJFrog · Artifactory
JFrog Artifactory authentication bypass flaws, 2024–2026
4 Artifactory CVEs with CWE-287 weaknesses, 7 Mar 2024 to 28 Aug 2026. 2 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2024’24
2025’25
3 2026’26
In CISA KEVNot in KEV
20241 CVE
20263 CVEs, 2 in KEV
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2023-42662 | 7 Mar 2024 | JFrog Artifactory Improper SSO Mechanism may lead to Exposure of Access Tokens | Grouped by weakness | 14.8 |
| CVE-2026-66014 | 27 Jul 2026 | Potential authentication bypass leading to privilege escalation in Artifactory | Grouped by weakness | 16.3 |
| CVE-2026-42018KEV | 12 Aug 2026 | JFrog Artifactory Improper Authentication Vulnerability | Grouped by weakness | 77.4 |
| CVE-2026-82329KEV | 28 Aug 2026 | JFrog Artifactory Improper Authentication Vulnerability | Grouped by weakness | 79.2 |