KNOWN EXPLOITED VULNERABILITY DOSSIER
CVE-2026-42016
JFrog · Artifactory
JFrog Artifactory contains an incorrect authorization vulnerability that leads to a privilege escalation attack due to a validation check of the token signature/issuer and not the token’s scope.
Correlated Federal Court Cases & Indictments (0)
No specific federal indictment in our landmark database directly links to this CVE yet. This vulnerability is monitored under CISA's Known Exploited Vulnerabilities catalog.
Associated Government Advisories
Direct advisory cross-references are being continuously mapped from CISA and allied CERT publications.