CVE-2026-82329

CVSS

—

EPSS

—

CISA KEV

Added 2026-09-02, due 2026-09-05

Exploitation

No report

Public exploits

8 repositories

State

Unknown

Coverage

• 

  ● Actively exploitedWiz Research10 Sept, 19:04

  Artifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329↗(opens the publisher's site in a new tab)

  Wiz Research has identified active, in-the-wild exploitation of three critical and high-severity vulnerabilities impacting JFrog Artifactory (CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329). Attackers are chaining these vulnerabilities to bypass authentication and gain administrative control.

What we observed

1. 24 Sept, 12:45poc publishedpoc-in-github
2. 24 Sept, 12:27poc publishedpoc-in-github
3. 24 Sept, 12:14poc publishedpoc-in-github
4. 24 Sept, 11:51poc publishedpoc-in-github
5. 24 Sept, 11:50kev addedcisa-kev