CVE-2026-82329 | Vulnetix

CVE-2026-82329 PUBLISHED KEV CVSS 8.600000381469727 HIGH

As of August 28, 2026, JFrog is affected by a vulnerability in the following product: Artifactory Prior to 7.111.21 Prior to 7.117.28 Prior to 7.125.20 Prior to 7.133.29 Prior to 7.146.38 Prior to 7.161.20 Open-source reporting indicates that CVE-2026-82329 related to JFrog Artifactory is being exploited in the wild. The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Update 1 On September 2, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-82329 to their Known Exploited Vulnerabilities (KEV) Database. Update 2 On September 11, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-42016 and CVE-2026-42018 to their Known Exploited Vulnerabilities (KEV) Database.

EPSS 14.37% · 96.6th percentile

Risk Scores

CVSS 4.0

8.600000381469727

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

EPSS Score

14.37%

96.6th percentile

Affected Products

Vendor	Product	Versions
Prior	Prior to 7.125.20
Prior	Prior to 7.133.29
Prior	Prior to 7.117.28
Prior	Prior to 7.111.21
Prior	Prior to 7.161.20
Prior	Prior to 7.146.38

Timeline

CVE Published
Aug 28, 2026 VulnCheck KEV Exploitation
Aug 28, 2026 Coalition ESS Score
Aug 29, 2026 EPSS Score
Aug 30, 2026 EPSS Score
Sep 1, 2026 VulnCheck KEV Exploitation
Sep 1, 2026 VulnCheck XDB Entry
Sep 1, 2026 Security Advisory
Sep 2, 2026 CISA KEV Added
Sep 2, 2026 VulnCheck KEV Exploitation
Sep 2, 2026 EPSS Score
Sep 2, 2026 VulnCheck XDB Entry

References

Open in Interactive Console →