en
JFrog is a global software company that develops platforms for DevOps, DevSecOps, and software supply chain management. Its core business is helping organizations manage, secure, distribute, and update software artifacts across cloud, on-premises, and hybrid environments. JFrog operates for development and enterprise software teams worldwide.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
As of 10/20/2026, jfrog recorded 44 security vulnerabilities in the last 90 days across 2 products, including 19 rated High or above and 4 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, artifactory had the most security vulnerabilities in the jfrog ecosystem, with 43 vulnerabilities—approximately 97.73% of the provider's total vulnerabilities during this period.
CVE-2026-92892Potential command execution on the host running JFrog CLI.CVE-2026-82329Potential authentication bypass leading to administrative access in ArtifactoryCVE-2026-70550Potential unauthorized access to private Composer repository metadata in JFrog ArtifactoryCVE-2026-70548SSRF In CocoaPods Via JFrog Artifactory External DependencyCVE-2026-69104Potential unauthorized repository migration in JFrog Artifactory80 Results | Page 1 of 8
| SeverityCritical |
| SeverityMedium |
| SeverityLow |
| SeverityHigh |
| SeverityHigh |
| SeverityHigh |
| SeverityHigh |
| SeverityMedium |
| SeverityHigh |