{"vulnerability": "CVE-2026-42016", "sightings": [{"uuid": "211eec60-0c86-4f3e-838f-d4163f05d911", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42016", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrxud4e2ri25", "content": "\ud83d\udccc CVE-2026-42016 - JFrog Artifactory (Self Hosted) versions before 7.133.11 are vulnerable to a privilege escalation attack due to a validation check of the token signat... https://www.cyberhub.blog/cves/CVE-2026-42016", "creation_timestamp": "2026-07-31T21:07:07.166789Z"}, {"uuid": "62a6973a-e45a-40a7-ad37-3badfd492d89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42016", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrnwcdjy562j", "content": "JFrog Artifactory (Self Hosted) 7.133.11\u672a\u6e80\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u306b\u306f\u3001\u30c8\u30fc\u30af\u30f3\u7f72\u540d/\u767a\u884c\u8005\u306e\u691c\u8a3c\u306e\u307f\u3067\u30b9\u30b3\u30fc\u30d7\u3092\u691c\u8a3c\u3057\u306a\u3044\u305f\u3081\u3001\u6a29\u9650\u6607\u7d66\u306e\u8106\u5f31\u6027\u304c\u3042\u308b\u3002\nCVE-2026-42016 CVSS 8.1 | HIGH", "creation_timestamp": "2026-07-27T22:15:50.993125Z"}, {"uuid": "d532e850-13e4-440a-84ed-345edc2ee381", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42016", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mvagykfodd2y", "content": "Here we go again with self-hosted deployments taking the hit, as intruders gracefully chain CVE-2026-42018 and CVE-2026-42016 to turn an anonymous token into full admin glory. Sparing us the suspense, they planted backdoors and minted rogue credentials in software build repositor...\n\nRead full story", "creation_timestamp": "2026-09-11T11:18:06.517224Z"}, {"uuid": "8a73c07e-3377-4029-9654-163dee726e40", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42016", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b3858317-0028-4305-afb3-9242c16e2e1a", "content": "", "creation_timestamp": "2026-09-11T19:00:02.654844Z"}, {"uuid": "b21b233b-4f39-43f6-bad2-f09bcbc913bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42016", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvb2yrezak2g", "content": "\ud83e\udd16 JFrog Artifactory under active attack: CVE-2026-42018 + CVE-2026-42016 chained to bypass auth, gain admin and deploy a Rust backdoor. Critical auth bypass CVE-2026-82329 also\u2026", "creation_timestamp": "2026-09-11T17:16:08.886609Z"}, {"uuid": "1572ecb9-0af6-4a65-ac00-d1358d88871e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42016", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mvb7frq45t25", "content": "\ud83d\uded1 CVE-2026-42016\nJFrog Artifactory\nCVSS 8.1 / EPSS 0% / KEV: No\nTL;DR: JFrog Artifactory (Self Hosted) versions before 7.133.11 are vulnerable to a privilege es\u2026\nhttps://cvesentinel.com/report/CVE-2026-42016?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-09-11T18:35:05.548300Z"}, {"uuid": "a075399b-387e-4c40-8671-baa064ed06eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42016", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mvb7z4zttq2q", "content": "Wiz Research has reported active exploitation of three vulnerabilities in JFrog Artifactory: CVE-2026-42016, CVE-2026-42018, and CVE-2026-82329. These vulnerabilities allow attackers to bypass authentication, escalate privileges, and gain administrative control.", "creation_timestamp": "2026-09-11T18:45:50.577693Z"}, {"uuid": "24ff05cf-8946-4c57-9c10-47fde659b625", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42016", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2baa9521-973e-45a7-bbcf-f7ec1e2d5f93", "content": "", "creation_timestamp": "2026-09-11T20:01:21.046578Z"}, {"uuid": "2d6c0917-8c85-4ea1-8ebe-f0d436749e81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42016", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mvbebkesu52f", "content": "~Cisa~\nCISA warns of active exploitation targeting JFrog Artifactory and ScreenConnect; prioritize remediation.\n-\nIOCs: CVE-2026-42016, CVE-2026-42018, CVE-2026-84869\n-\n#CISA #KEV #ThreatIntel", "creation_timestamp": "2026-09-11T20:02:06.968699Z"}, {"uuid": "c9185887-197b-46c9-a9e8-23e29a652a97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42016", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mvbmyxjle52x", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-42016: JFrog Artifactory Incorrect Authorization Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-42016", "creation_timestamp": "2026-09-11T22:38:22.581311Z"}, {"uuid": "1461cbf8-a79e-4b35-af73-17f728db0956", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42016", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mvbsscpkkq2i", "content": "CVE-2026-42016 is trending. Hype score 7, currently #8 on cvemon.\n\nJFrog Artifactory (Self Hosted) versions before 7.133.11 are vulnerable to a privilege escalation attack due to a validation check of the token signature/issuer and not the token\u2019s\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-42016", "creation_timestamp": "2026-09-12T00:22:01.338766Z"}, {"uuid": "b8528b39-f1d0-410d-a536-4b5ec19f0dbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-42016", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/jfrog-security-advisory-av26-867", "content": "", "creation_timestamp": "2026-09-12T00:15:05.302203Z"}, {"uuid": "9ffabaea-818c-454c-b889-3df81212a051", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42016", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvbw5z6i2f2p", "content": "\ud83e\udd16 JFrog Artifactory chain (CVE-2026-42018 + CVE-2026-42016) exploited in the wild: auth bypass to admin, then Rust backdoor with C2 on self-hosted instances (Wiz). Patch now.\nhttps://www.bleepingcomputer.com/news/security/artifactory-flaws-chained-in-attacks-deploying-backdoor-malware/", "creation_timestamp": "2026-09-12T01:22:15.513134Z"}, {"uuid": "297246c8-cbc0-4268-a3f6-c71cd477902e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42016", "type": "seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mvchfrowy62e", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-42016: \u26a0\ufe0f CVE-2026-42016: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 0.3%\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2026-42016-jfrog-artifactory-self-hosted-versions-before", "creation_timestamp": "2026-09-12T06:30:49.559883Z"}, {"uuid": "ab9b4d71-3ec9-4512-bb61-aaae0ae35a98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42016", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mvclfweok62z", "content": "Artifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329 #appsec", "creation_timestamp": "2026-09-12T07:42:29.566980Z"}, {"uuid": "62f593ec-9fd8-4db2-be48-fc74b9a92f30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42016", "type": "seen", "source": "https://thehackernews.com/2026/09/cisa-adds-5-actively-exploited.html", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added five security flaws impacting JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation in the wild.\n\nDetails of the vulnerabilities are as follows -\n\n\n  CVE-2026-42016 (CVSS score: 8.1) - An incorrect authorization", "creation_timestamp": "2026-09-12T19:00:35.365051Z"}, {"uuid": "8b6e6b22-a02f-42f3-b677-e85e98d4b235", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42016", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvdwytfj4u2z", "content": "\ud83e\udd16 CISA adds 5 actively exploited flaws to KEV: JFrog Artifactory, ConnectWise ScreenConnect, MikroTik RouterOS. Includes CVE-2026-42016 (CVSS 8.1). Patch or isolate exposed instances.\n\nhttps://thehackernews.com/2026/09/cisa-adds-5-actively-exploited.html", "creation_timestamp": "2026-09-12T20:42:35.490468Z"}, {"uuid": "84a9c97e-065b-4a78-909c-d886999d6af5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42016", "type": "seen", "source": "https://thehackernews.com/2026/09/cisa-adds-5-actively-exploited.html", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added five security flaws impacting JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation in the wild.\n\nDetails of the vulnerabilities are as follows -\n\n\n  CVE-2026-42016 (CVSS score: 8.1) - An incorrect authorization", "creation_timestamp": "2026-09-13T01:00:33.441939Z"}, {"uuid": "8e5942a6-a5b5-40d7-8b1c-b8b2f96f0a87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42016", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mveyykvrru24", "content": "\ud83e\udd16 CISA adds 5 actively exploited flaws to KEV: JFrog Artifactory (CVE-2026-42016), ConnectWise ScreenConnect, MikroTik RouterOS. Patch now.\nhttps://thehackernews.com/2026/09/cisa-adds-5-actively-exploited.html", "creation_timestamp": "2026-09-13T06:50:53.364412Z"}, {"uuid": "1cec446b-86e4-4279-b273-de1097d70c5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42016", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mvfnctexr424", "content": "Artifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329", "creation_timestamp": "2026-09-13T12:54:32.627327Z"}, {"uuid": "dadc6e05-1dfa-45a5-80df-93d6bbcd48bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42016", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mvfz4gm3ea2t", "content": "\ud83d\udd34 EXPLOITED\n\nSelf-managed JFrog Artifactory: CISA flagged two more flaws (CVE-2026-42016 + CVE-2026-42018) as exploited.\n\nChained, they turn an unauthenticated request into admin in under five minutes.\n\nPatch, then rotate tokens and hunt for planted admins.", "creation_timestamp": "2026-09-13T16:25:43.145364Z"}, {"uuid": "3bb607cd-29c2-44a8-97e9-cc648050141d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42016", "type": "seen", "source": "Telegram/Fk7Bog3gVmVbuJndN5Dv-zI4yhjd1bLXC7_WPMmsFOdMwA", "content": "", "creation_timestamp": "2026-09-14T03:00:05.337646Z"}, {"uuid": "6f8ab41d-4150-4813-a34d-8a9ba32966c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42016", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mvhdej5zwj2p", "content": "CISA Adds Three Known Exploited Vulnerabilities to Catalog\uff08CISA\u3001\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f3\u4ef6\u306e\u8106\u5f31\u6027\u3092KEV\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\uff09 #CISA \uff08Sep 11\uff09 \n\nCVE-2026-42016 JFrog Artifactory\u306b\u304a\u3051\u308b\u8a8d\u8a3c\u30a8\u30e9\u30fc\u306e\u8106\u5f31\u6027 \nCVE-2026-42018 JFrog Artifactory\u306e\u8a8d\u8a3c\u30a8\u30e9\u30fc\u306e\u8106\u5f31\u6027 \nCVE-2026-84869 ConnectWise ScreenConnect\u306b\u304a\u3051\u308b\u4e0d\u9069\u5207\u306a\u6a29\u9650\u7ba1\u7406\u3068\u8a8d\u8a3c\u306e\u6b20\u843d\u306e\u8106\u5f31\u6027\n\nwww.cisa.gov/news-events/...", "creation_timestamp": "2026-09-14T05:01:51.278271Z"}, {"uuid": "c94ef156-4bea-4a43-a9a4-b7d22364c2c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42016", "type": "seen", "source": "https://www.acn.gov.it/portale/w/jfrog-rilevato-sfruttamento-in-rete-delle-vulnerabilita-cve-2026-42016-e-cve-2026-42018-in-artifactory", "content": "Rilevato lo sfruttamento attivo in rete di due vulnerabilit\u00e0 con gravit\u00e0 \"alta\" - gi\u00e0 sanate dal vendor - relative al prodotto JFrog Artifactory, piattaforma per la gestione e distribuzione di artefatti software", "creation_timestamp": "2026-09-14T10:00:42.376742Z"}, {"uuid": "b1264f9e-178a-4c49-bf05-89285180a6d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42016", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mvim4r74k52z", "content": "CRITICAL CISA KEV ALERT: CVE-2026-42016 targets JFrog Artifactory via incorrect authorization and token scope flaws. Active exploitation verified. Access our TSUITE brief for Splunk, Sentinel, QRadar queries, and endpoint hardening steps to secure your software\u2026", "creation_timestamp": "2026-09-14T17:11:21.436079Z"}]}