Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Stealing the Artifact – JFrog Artifactory Vulnerability

netspi.com | blog | #supply-chain | #vulnerability-research | #jfrog | #artifactory | #cve-2026-42018 | #auth-bypass | #cve-2026-69107

Summary

NetSPI chained four JFrog Artifactory vulnerabilities, including CVE-2026-42018 and CVE-2026-69107, to bypass authentication entirely and retrieve arbitrary artifacts as an unauthenticated attacker.
Published
Collected

original ↗

Related coverage

vulnerability · wiz.io
Artifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329
Wiz Research documents exploitation of three Artifactory flaws (CVE-2026-42016, -42018, -82329), chained for auth bypass and admin takeover — planted admin accounts, Groovy plugins and Rust backdoors.
blog · jfrog.com
JFrog Artifactory Supports LuaRocks Hosting for NGINX, OpenResty and Kong
Host Lua modules for NGINX, OpenResty, and Kong on infrastructure you control. JFrog Artifactory now supports LuaRocks hosting for private and cached public rocks.
blog · jfrog.com
Coding Agents Just Reopened Your Software Supply Chain Blind Spot
This coverage gives security teams current context for monitoring, validation, and remediation.
blog · jfrog.com
Introducing JFrog Platform Federation: One Control Plane for Synchronizing Every Site in Your Software Supply Chain
JFrog introduces Platform Federation: a peer-to-peer control plane that synchronizes projects, access control, policies, artifacts and repositories across all sites, removing manual multi-site work.
blog · jfrog.com
Fly Graduates: Agentic Repository Experience Lands in the JFrog Platform
This coverage gives security teams current context for monitoring, validation, and remediation.
blog · jfrog.com
The Agenda is Live for swampUP 2024!
The excitement is building. JFrog is pleased to announce the awesome agenda we have assembled for swampUP 2024 at the Omni Barton Creek Resort & Spa in Austin. Join us Sep 9-11 for one of the premier DevOps conferences of the year, focusing on the latest trends in software development platforms, supply chain security, OSS…
back