artifactory
- Software type
- Artifact repository
- Total vulnerabilities (90 days)
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 10/18/2026, artifactory recorded 43 security vulnerabilities in the last 90 days, of which 18 are rated High or Critical. Notably, 4 of these vulnerabilities are actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of artifactory and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-82329Potential authentication bypass leading to administrative access in ArtifactoryCVE-2026-70550Potential unauthorized access to private Composer repository metadata in JFrog ArtifactoryCVE-2026-70548SSRF In CocoaPods Via JFrog Artifactory External DependencyCVE-2026-69104Potential unauthorized repository migration in JFrog ArtifactoryCVE-2026-70551Server-Side Request Forgery Via VCS remote download in JFrog Artifactory| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-82329Potential authentication bypass leading to administrative access in Artifactory | Exploitation statusKEV | FixYes |
| SeverityCritical |
CVE-2026-70550Potential unauthorized access to private Composer repository metadata in JFrog Artifactory | Exploitation statusNot exploited | FixYes | Published08/25/2026 | SeverityMedium |
|---|
CVE-2026-70548SSRF In CocoaPods Via JFrog Artifactory External Dependency | Exploitation statusNot exploited | FixYes | Published08/25/2026 | SeverityLow |
|---|
CVE-2026-69104Potential unauthorized repository migration in JFrog Artifactory | Exploitation statusNot exploited | FixYes | Published08/25/2026 | SeverityHigh |
|---|
CVE-2026-70551Server-Side Request Forgery Via VCS remote download in JFrog Artifactory | Exploitation statusNot exploited | FixYes | Published08/25/2026 | SeverityHigh |
|---|
CVE-2026-69106Potential cache poisoning in JFrog Artifactory | Exploitation statusNot exploited | FixYes | Published08/12/2026 | SeverityHigh |
|---|
CVE-2026-42018Anonymous user token generation exposure in JFrog Artifactory | Exploitation statusKEV | FixYes | Published08/12/2026 | SeverityHigh |
|---|
CVE-2026-69107Potential unauthorized artifact access in JFrog Artifactory | Exploitation statusNot exploited | FixYes | Published08/12/2026 | SeverityMedium |
|---|
CVE-2026-69105Potential package cache integrity issue in JFrog Artifactory | Exploitation statusNot exploited | FixYes | Published08/12/2026 | SeverityHigh |
|---|
CVE-2026-70547Potential unauthorized metadata exposure in JFrog Artifactory | Exploitation statusNot exploited | FixYes | Published08/12/2026 | SeverityMedium |
|---|
78 Results | Page 1 of 8