{"total":3,"items":[{"id":156,"title":"CVE-2026-42016: JFrog Artifactory Incorrect Authorization Vulnerability","original_title":"CVE-2026-42016: JFrog Artifactory Incorrect Authorization Vulnerability","source_rating":null,"summary":"JFrog Artifactory contains an incorrect authorization vulnerability that leads to a privilege escalation attack due to a validation check of the token signature/issuer and not the token’s scope.\n\nVereiste actie: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioriti","ai":false,"actions":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42016","type":"kev","language":"en","published_at":"2026-09-11T00:00:00+00:00","severity":"hoog","priority":48,"vendors":["JFrog"],"cves":[{"id":"CVE-2026-42016","cvss":8.8,"epss":0.08643,"epss_percentile":0.94954,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":8.8,"epss_max":0.08643,"source_count":1,"ncsc":null,"source":{"slug":"cisa-kev","name":"CISA Known Exploited Vulnerabilities","category":"vulnerability","country":"US","license":"Publiek domein (US-overheid)","reuse":"open"},"bundle":null},{"id":157,"title":"CVE-2026-42018: JFrog Artifactory Improper Authentication Vulnerability","original_title":"CVE-2026-42018: JFrog Artifactory Improper Authentication Vulnerability","source_rating":null,"summary":"JFrog Artifactory contains an improper authentication vulnerability that could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources.\n\nVereiste actie: Apply mitigations in accordance with vendor instructions, ensuring compliance ","ai":false,"actions":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42018","type":"kev","language":"en","published_at":"2026-09-11T00:00:00+00:00","severity":"hoog","priority":48,"vendors":["JFrog"],"cves":[{"id":"CVE-2026-42018","cvss":7.5,"epss":0.09805,"epss_percentile":0.95408,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":7.5,"epss_max":0.09805,"source_count":1,"ncsc":null,"source":{"slug":"cisa-kev","name":"CISA Known Exploited Vulnerabilities","category":"vulnerability","country":"US","license":"Publiek domein (US-overheid)","reuse":"open"},"bundle":null},{"id":173,"title":"CVE-2026-82329: JFrog Artifactory Improper Authentication Vulnerability","original_title":"CVE-2026-82329: JFrog Artifactory Improper Authentication Vulnerability","source_rating":null,"summary":"JFrog Artifactory contains an improper authentication vulnerability that under default configuration can allow an unauthenticated attacker with network access to obtain administrative privileges. \n\nVereiste actie: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Priori","ai":false,"actions":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-82329","type":"kev","language":"en","published_at":"2026-09-02T00:00:00+00:00","severity":"hoog","priority":65,"vendors":["JFrog"],"cves":[{"id":"CVE-2026-82329","cvss":9.8,"epss":0.14121,"epss_percentile":0.96465,"in_kev":true,"kev_ransomware":false}],"cve_count":1,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":9.8,"epss_max":0.14121,"source_count":1,"ncsc":null,"source":{"slug":"cisa-kev","name":"CISA Known Exploited Vulnerabilities","category":"vulnerability","country":"US","license":"Publiek domein (US-overheid)","reuse":"open"},"bundle":null}]}