Unauthenticated intruders can mint admin tokens, and exposed servers are already being hit
Read full article at The Register ↗CVE-2026-82329 is an authentication bypass flaw in JFrog's repository manager that enables bad actors to gain admin-level access on affected systems.
The attacks targeting CVE-2026-0768 are the latest threat against the low-code AI development platform, which is receiving more attention from adversaries this year.
Threat actors are exploiting a newly patched critical security flaw impacting JFrog Artifactory merely days after public disclosure, according to watchTowr. The vulnerability in question is CVE-2026-82329 (CVSS score: 9.8), a case of authentication bypass that could lead to administrative access in Artifactory. "JFrog Artifactory contains an authentication weakness that, under default
CISA argues that the security industry's traditional approach of treating vulnerabilities as individual fixes is ineffective against attackers, and advocates instead for eliminating entire vulnerability classes at their root during software development. Rather than pursuing endless patching cycles, the agency contends that developers can prevent the weaknesses most likely to be exploited by threat actors by addressing fundamental causes in the development process.