Attackers Actively Exploiting Critical JFrog Artifactory Flaw (CVE-2026-82329) for Administrative Access

Threat actors have begun actively exploiting a critical authentication bypass vulnerability, CVE-2026-82329, in JFrog Artifactory. The flaw, with a CVSS score of 9.8, allows unauthenticated attackers with network access to obtain administrative privileges, posing a significant risk to software supply chains. JFrog released a patch for this vulnerability on August 28, 2026.