Artifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329

Published

2026-09-10 19:04

Collected

2026-09-10 19:46

---
id: 7568
title: "Artifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329"
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/artifactory-under-attack-in-the-wild-exploitation-of-cve-2026-42016-cve-2026-4201"
published_at: "2026-09-10T19:04:00Z"
tags: ["jfrog", "artifactory", "wiz", "cve-2026-42016", "cve-2026-42018", "cve-2026-82329", "in-the-wild"]
phying_url: "https://phying.com/item/7568"
lang: en
---

# Artifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329

## Summary

Wiz Research documents exploitation of three Artifactory flaws (CVE-2026-42016, -42018, -82329), chained for auth bypass and admin takeover — planted admin accounts, Groovy plugins and Rust backdoors.

## Intelligence Metadata

- **Sources:** wiz.io
- **Published:** 2026-09-10T19:04:00Z
- **Original:** https://www.wiz.io/blog/artifactory-under-attack-in-the-wild-exploitation-of-cve-2026-42016-cve-2026-4201
- **Phying News:** https://phying.com/item/7568