CVE-2026-82329
CriticalKnown Exploited
1 article mentions this CVE.
- CriticalVulnerability
CVE-2026-82329: Unauthenticated Administrative Access in JFrog Artifactory via an Empty Cluster Join Key
A misconfigured cluster join key in JFrog Artifactory's default install lets unauthenticated attackers mint a permanent admin token in one request. Bishop Fox reproduced the full chain, confirmed in-the-wild exploitation
Bishop FoxFull article →