CVE-2026-42018 | Vulnetix

CVE-2026-42018 PUBLISHED KEV CVSS 8.600000381469727 HIGH

As of August 28, 2026, JFrog is affected by a vulnerability in the following product: Artifactory Prior to 7.111.21 Prior to 7.117.28 Prior to 7.125.20 Prior to 7.133.29 Prior to 7.146.38 Prior to 7.161.20 Open-source reporting indicates that CVE-2026-82329 related to JFrog Artifactory is being exploited in the wild. The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Update 1 On September 2, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-82329 to their Known Exploited Vulnerabilities (KEV) Database. Update 2 On September 11, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-42016 and CVE-2026-42018 to their Known Exploited Vulnerabilities (KEV) Database.

EPSS 9.80% · 95.4th percentile

Risk Scores

CVSS 4.0

8.600000381469727

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

EPSS Score

9.80%

95.4th percentile

Affected Products

Vendor	Product	Versions
Prior	Prior to 7.125.20
Prior	Prior to 7.146.38
Prior	Prior to 7.111.21
Prior	Prior to 7.117.28
Prior	Prior to 7.133.29
Prior	Prior to 7.161.20

Timeline

Aug 12, 2026 Coalition ESS Score
Aug 12, 2026 CVE Published
Aug 20, 2026 Security Advisory
Aug 24, 2026 EPSS Score
Aug 25, 2026 EPSS Score
Aug 27, 2026 EPSS Score
Aug 28, 2026 VulnCheck KEV Exploitation
Sep 1, 2026 VulnCheck KEV Exploitation
Sep 1, 2026 EPSS Score
Sep 1, 2026 VulnCheck XDB Entry
Sep 2, 2026 VulnCheck KEV Exploitation
Sep 2, 2026 VulnCheck XDB Entry

References

Open in Interactive Console →