pwn.watch: JFrog incident updates https://pwn.watch/t/jfrog Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Thu, 22 Oct 2026 16:23:59 GMT [high] JFrog Artifactory: JFrog Artifactory Incorrect Authorization Vulnerability: CISA added CVE-2026-42016, CVE-2026-42018 to the KEV catalog (due 2026-09-25). https://pwn.watch/i/jfrog-artifactory-cve-2026-42016 jfrog-artifactory-cve-2026-42016:2026-09-11:CISA added CVE-2026-42016, CVE-2026-42018 to the KEV catalog (due 2026-09-25). Fri, 11 Sep 2026 00:00:00 GMT high Status: closed, patched [high] JFrog Artifactory: JFrog Artifactory Improper Authentication Vulnerability: CISA added CVE-2026-82329 to the KEV catalog (due 2026-09-05). https://pwn.watch/i/jfrog-artifactory-cve-2026-82329 jfrog-artifactory-cve-2026-82329:2026-09-02:CISA added CVE-2026-82329 to the KEV catalog (due 2026-09-05). Wed, 02 Sep 2026 00:00:00 GMT high Status: closed, patched [high] JFrog Artifactory: JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability: CISA added CVE-2026-66384 to the KEV catalog (due 2026-09-10). https://pwn.watch/i/jfrog-artifactory-cve-2026-66384 jfrog-artifactory-cve-2026-66384:2026-08-27:CISA added CVE-2026-66384 to the KEV catalog (due 2026-09-10). Thu, 27 Aug 2026 00:00:00 GMT high Status: closed, patched