JFrog
CVEs currently on EVULNABLE's Priority Feed for JFrog, and this vendor's own CISA KEV history.
CISA KEV additions over time
Weekly additions to the KEV catalog, last 26 weeks. Ransomware-linked additions are the base of each bar. Ransomware-linked as currently marked by CISA; recent weeks can rise as CISA updates entries.
20 Apr – 12 Oct; busiest week: 2 added.
- Not ransomware-linked
- Ransomware-linked
- This week (so far)
| Week of | Added to KEV | Ransomware-linked |
|---|---|---|
| 2026-04-20 | 0 | 0 |
| 2026-04-27 | 0 | 0 |
| 2026-05-04 | 0 | 0 |
| 2026-05-11 | 0 | 0 |
| 2026-05-18 | 0 | 0 |
| 2026-05-25 | 0 | 0 |
| 2026-06-01 | 0 | 0 |
| 2026-06-08 | 0 | 0 |
| 2026-06-15 | 0 | 0 |
| 2026-06-22 | 0 | 0 |
| 2026-06-29 | 0 | 0 |
| 2026-07-06 | 0 | 0 |
| 2026-07-13 | 0 | 0 |
| 2026-07-20 | 0 | 0 |
| 2026-07-27 | 0 | 0 |
| 2026-08-03 | 0 | 0 |
| 2026-08-10 | 0 | 0 |
| 2026-08-17 | 0 | 0 |
| 2026-08-24 | 1 | 0 |
| 2026-08-31 | 1 | 0 |
| 2026-09-07 | 2 | 0 |
| 2026-09-14 | 0 | 0 |
| 2026-09-21 | 0 | 0 |
| 2026-09-28 | 0 | 0 |
| 2026-10-05 | 0 | 0 |
| 2026-10-12 (so far) | 0 | 0 |
In EVULNABLE's ranked feed
Showing all 4 JFrog CVEs in EVULNABLE's ranked feed.
#1 75 Urgent CVE-2026-82329 CISA federal deadline · Overdue by 42 daysCISA KEV JFrog — JFrog Artifactory Improper Authentication Vulnerability KEV, EPSS 14.1%, added to KEV within the last 90 days
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.141.
#2 75 Urgent CVE-2026-42018 CISA federal deadline · Overdue by 22 daysCISA KEV JFrog — JFrog Artifactory Improper Authentication Vulnerability KEV, EPSS 9.8%, added to KEV within the last 90 days
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.098.
#3 75 Urgent CVE-2026-42016 CISA federal deadline · Overdue by 22 daysCISA KEV JFrog — JFrog Artifactory Incorrect Authorization Vulnerability KEV, EPSS 8.6%, added to KEV within the last 90 days
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.086.
#4 75 Urgent CVE-2026-66384 CISA federal deadline · Overdue by 37 daysCISA KEV JFrog — JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability KEV, EPSS 0.7%, added to KEV within the last 90 days
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.007.