https://patchfirst.co/vendor/jfrog/New and newly exploited JFrog CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2026-42018/CVE-2026-42018#kevFri, 11 Sep 2026 00:00:00 GMTJFrog · Artifactory. In CISA KEV since 2026-09-11. ENISA EUVD lists it as exploited. EPSS 9.8% (higher than 95.5% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1528 Steal Application Access Token. Priority 77.4 of 100.kevpublic-exploitT1190T1528https://patchfirst.co/cve/CVE-2026-42016/CVE-2026-42016#kevFri, 11 Sep 2026 00:00:00 GMTJFrog · Artifactory. In CISA KEV since 2026-09-11. ENISA EUVD lists it as exploited. EPSS 8.6% (higher than 95.1% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1078 Valid Accounts. Priority 73.2 of 100.kevT1078https://patchfirst.co/cve/CVE-2026-82329/CVE-2026-82329#kevWed, 02 Sep 2026 00:00:00 GMTJFrog · Artifactory. In CISA KEV since 2026-09-02. ENISA EUVD lists it as exploited. EPSS 14.4% (higher than 96.6% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1078 Valid Accounts. Priority 79.2 of 100.kevpublic-exploitT1190T1078https://patchfirst.co/cve/CVE-2026-66384/CVE-2026-66384#kevThu, 27 Aug 2026 00:00:00 GMTJFrog · Artifactory. In CISA KEV since 2026-08-27. ENISA EUVD lists it as exploited. EPSS 0.7% (higher than 51.8% of CVEs). CVSS 5.3 MEDIUM. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1565 Data Manipulation. Priority 67.1 of 100.kevpublic-exploitT1190T1565https://patchfirst.co/cve/CVE-2019-17444/CVE-2019-17444Mon, 12 Oct 2020 00:00:00 GMTJfrog · Artifactory. Not in CISA KEV. EPSS 69.4% (higher than 99.36% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 31.7 of 100.public-exploit