← Incidents
INCIDENT 515Exploited vulnerabilityHIGH CONFIDENCESourced
CVE-2026-42016 added to CISA KEV: JFrog Artifactory Incorrect Authorization Vulnerability
<p>CISA has added three new vulnerabilities to its <a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Known Exploited Vulnerabilities (KEV) Catalog</a>, based on evidence of active exploitation.</p> <ul> <li><a href="https://www.cve.org/CVERecord?id=CVE-2026-42016" target="_blank">CVE-2026-42016</a> JFrog Artifactory Incorrect Authorization Vulnerability </li> <li><a href="https://www.cve.org/CVERecord?id=CVE-2026-42018" target="_blank">CVE-2026-42018</a> JFrog Artifactory Improper Authentication Vulnerability </li> <li><a href="https://www.cve.org/CVERecord?id=C…
Last evidence update
11 SEP 2026 · 12:00 UTC
Source count
5
Status
high confidence
GovernmentCVE-2026-42016CVE-2026-42018CVE-2026-84869
Observation history
How this record has evolved as evidence accumulated.
12 SEP · 05:22 UTC
Initial report
12 SEP · 05:22 UTC
Second independent source
12 SEP · 05:22 UTC
Related CVE identified (CVE-2026-42018)
12 SEP · 05:22 UTC
Second independent source
12 SEP · 05:22 UTC
Summary updated from new evidence
12 SEP · 05:22 UTC
Related CVE identified (CVE-2026-84869)
13 SEP · 05:22 UTC
Second independent source
13 SEP · 05:22 UTC
Confidence upgraded
13 SEP · 05:22 UTC
Status changed
13 SEP · 05:22 UTC
Second independent source
Evidence
NVD · primary
CVE-2026-42016 (HIGH)
NVD · primary
CVE-2026-42018 (HIGH)
CISA KEV · high
CVE-2026-42016 added to CISA KEV: JFrog Artifactory Incorrect Authorization Vulnerability
CISA KEV · high
CVE-2026-42018 added to CISA KEV: JFrog Artifactory Improper Authentication Vulnerability
CISA · high
CISA Adds Three Known Exploited Vulnerabilities to Catalog
Related incidents