> TritonInfoSec News
Home / Sep 03, 2026 / Story
0
#5 The Hacker News general September 01, 2026 at 17:53 UTC

Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure

By [email protected] (The Hacker News)

AI Summary

CVE-2026-82329, a CVSS 9.8 authentication bypass in JFrog Artifactory, is being actively exploited just days after public disclosure, with attackers forging administrative tokens on affected instances. Watchtowr confirmed in-the-wild exploitation, noting the flaw stems from an authentication weakness present in default configurations. JFrog Artifactory is a widely used artifact repository in CI/CD pipelines, and admin-level compromise could enable supply chain attacks via poisoned build artifacts.

Read full article → https://thehackernews.com/2026/09/attackers-exploi…

Relevance score: 84.0/100

# More from September 03

  1. 1
    FBI Probes Service Selling 153M+ Drivers Licenses Krebs on Security
  2. 2
    Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain The Hacker News
  3. 3
    Authorities Turn Sality's P2P Network Against Itself, Cutting Off New Malware Payloads The Hacker News
  4. 4
    Health data of more than 9.5 million people leaked from Aesto record system The Record
  5. 6
    BGP Hijack Delivers Malicious Virtualizor Update That Establishes Persistent Root Access The Hacker News
  6. 7
    Pegasus, NoviSpy variant spyware found on devices of Serbian activists CyberScoop
  7. 8
    Attackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without Credentials The Hacker News
  8. 9
    Nearly 22,000 Microsoft Exchange servers vulnerable to hijack attacks BleepingComputer
  9. 10
    Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code The Hacker News