CTI · reviewed · 2026-09-13

JFrog Artifactory Vulnerabilities Actively Exploited in the Wild to Gain Administrative Control

Full story & timeline

MITRE ATT&CK

• T1190 Exploit Public-Facing Application Initial Access
• T1078 Valid Accounts Stealth
• T1505 Server Software Component Persistence
• T1059 Command and Scripting Interpreter Execution
• T1082 System Information Discovery Discovery

Indicators

No curated indicators tied to this case.

Detections

No detection content yet — case analysis did not yield signal-specific telemetry. Check back after the next daily CTI pass.

References

• https://www.wiz.io/blog/artifactory-under-attack-in-the-wild-exploitation-of-cve-2026-42016-cve-2026-42018-cve-2026-82329
• https://www.bleepingcomputer.com/news/security/jfrog-artifactory-auth-bypass-flaw-exploited-to-create-admin-tokens/