Seinwacht

Meldingen

3 meldingen uit primaire bronnen. Filter op ernst, type of vendor, of zoek op een CVE-nummer.

Ernst
Type
Soort bron
Vendor
Sorteren
Wissen

Koppelen

RSS-feed met deze filters

Zet de feed in je RSS-lezer, of in Slack (/feed subscribe) of Teams (RSS-connector), dan komen nieuwe meldingen vanzelf in je teamkanaal.

Liever zelf bouwen? De data is ook beschikbaar als JSON: API-specificatie (OpenAPI).

  • CVE-2026-42016: JFrog Artifactory Incorrect Authorization Vulnerability

    CISA Known Exploited VulnerabilitiesKEV

    JFrog Artifactory contains an incorrect authorization vulnerability that leads to a privilege escalation attack due to a validation check of the token signature/issuer and not the token’s scope. Vereiste actie: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioriti

    Actief misbruiktCVSS 8,8EPSS 9%CVE-2026-42016JFrog
    prio48hoog

  • CVE-2026-42018: JFrog Artifactory Improper Authentication Vulnerability

    CISA Known Exploited VulnerabilitiesKEV

    JFrog Artifactory contains an improper authentication vulnerability that could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources. Vereiste actie: Apply mitigations in accordance with vendor instructions, ensuring compliance

    Actief misbruiktCVSS 7,5EPSS 10%CVE-2026-42018JFrog
    prio48hoog

  • CVE-2026-82329: JFrog Artifactory Improper Authentication Vulnerability

    CISA Known Exploited VulnerabilitiesKEV

    JFrog Artifactory contains an improper authentication vulnerability that under default configuration can allow an unauthenticated attacker with network access to obtain administrative privileges. Vereiste actie: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Priori

    Actief misbruiktCVSS 9,8EPSS 14%CVE-2026-82329JFrog
    prio65hoog