MORE JFROG ARTIFACTORY BUGS UNDER ATTACK, AND ALL 3 HAVE PATCHES

Summary from the TLDR InfoSec newsletter

Attackers are exploiting CVE-2026-42018, CVE-2026-42016, and CVE-2026-82329 in JFrog Artifactory. Activity includes admin-account creation, Rust backdoors, Groovy plugins, web shells, token minting, and key theft. Wiz found 59 percent exposed to CVE-2026-42016 and 62 percent to CVE-2026-42018, so please patch exposed instances, restrict network access, and audit privileged logins.