{"metadata": {"vulnerability": "CVE-2026-42016", "count": 64, "kinds": {"milestone": 5, "sighting": 35, "kev": 11, "other": 13}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0272", "record": "NCSC-2026-0272", "field": "document.tracking.generator.date"}, {"timestamp": "2026-04-23T13:41:13.754Z", "date_only": false, "value": "2026-04-23T13:41:13.754Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-42016", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-07-27T19:20:56.352Z", "date_only": false, "value": "2026-07-27T19:20:56.352Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-42016", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-27T19:20:56.352Z", "date_only": false, "value": "2026-07-27T19:20:56.352Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / JFROG", "record": "CVE-2026-42016", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-27T20:16:39Z", "date_only": false, "value": "2026-07-27T20:16:39Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-58CV-8CFM-C8R8", "record": "GHSA-58CV-8CFM-C8R8", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-07-27T20:16:39.613Z", "date_only": false, "value": "2026-07-27T20:16:39.613", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-42016", "record": "FKIE_CVE-2026-42016", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-27T21:31:21Z", "date_only": false, "value": "2026-07-27T21:31:21Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-58CV-8CFM-C8R8", "record": "GHSA-58CV-8CFM-C8R8", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-27T22:15:50.993Z", "date_only": false, "value": "2026-07-27T22:15:50.993125Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrnwcdjy562j", "record": "CVE-2026-42016", "field": "creation_timestamp", "uuid": "62a6973a-e45a-40a7-ad37-3badfd492d89", "content": "JFrog Artifactory (Self Hosted) 7.133.11\u672a\u6e80\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u306b\u306f\u3001\u30c8\u30fc\u30af\u30f3\u7f72\u540d/\u767a\u884c\u8005\u306e\u691c\u8a3c\u306e\u307f\u3067\u30b9\u30b3\u30fc\u30d7\u3092\u691c\u8a3c\u3057\u306a\u3044\u305f\u3081\u3001\u6a29\u9650\u6607\u7d66\u306e\u8106\u5f31\u6027\u304c\u3042\u308b\u3002\nCVE-2026-42016 CVSS 8.1 | HIGH", "url": "https://bsky.app/profile/postac001.bsky.social/post/3mrnwcdjy562j"}, {"timestamp": "2026-07-31T08:51:36.263Z", "date_only": false, "value": "2026-07-31T08:51:36.263558Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0272", "record": "NCSC-2026-0272", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-07-31T08:51:36.263Z", "date_only": false, "value": "2026-07-31T08:51:36.263558Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0272", "record": "NCSC-2026-0272", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-31T08:51:36.263Z", "date_only": false, "value": "2026-07-31T08:51:36.263558Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0272", "record": "NCSC-2026-0272", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-07-31T21:07:07.166Z", "date_only": false, "value": "2026-07-31T21:07:07.166789Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrxud4e2ri25", "record": "CVE-2026-42016", "field": "creation_timestamp", "uuid": "211eec60-0c86-4f3e-838f-d4163f05d911", "content": "\ud83d\udccc CVE-2026-42016 - JFrog Artifactory (Self Hosted) versions before 7.133.11 are vulnerable to a privilege escalation attack due to a validation check of the token signat... https://www.cyberhub.blog/cves/CVE-2026-42016", "url": "https://bsky.app/profile/cyberhub.blog/post/3mrxud4e2ri25"}, {"timestamp": "2026-09-10T19:04:00Z", "date_only": false, "value": "2026-09-10T19:04:00+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-42016", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "2baa9521-973e-45a7-bbcf-f7ec1e2d5f93", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-10T19:04:00Z", "date_only": false, "value": "2026-09-10T19:04:00.000Z", "kind": "kev", "label": "Catalog added", "source": "previdian", "record": "CVE-2026-42016", "field": "evidence.0.details.added_date", "uuid": "2baa9521-973e-45a7-bbcf-f7ec1e2d5f93", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-10T19:04:00Z", "date_only": false, "value": "2026-09-10T19:04:00+00:00", "kind": "kev", "label": "First seen", "source": "previdian", "record": "CVE-2026-42016", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "2baa9521-973e-45a7-bbcf-f7ec1e2d5f93", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-10T19:04:00Z", "date_only": false, "value": "2026-09-10T19:04:00+00:00", "kind": "kev", "label": "Status updated", "source": "previdian", "record": "CVE-2026-42016", "field": "status.status_updated_at", "uuid": "2baa9521-973e-45a7-bbcf-f7ec1e2d5f93", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-11T00:00:00Z", "date_only": false, "value": "2026-09-11T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2026-42016", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "b3858317-0028-4305-afb3-9242c16e2e1a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-11T00:00:00Z", "date_only": true, "value": "2026-09-11", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-42016", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2026-09-11T00:00:00Z", "date_only": true, "value": "2026-09-11", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2026-42016", "field": "evidence.0.details.date_added", "uuid": "b3858317-0028-4305-afb3-9242c16e2e1a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-11T00:00:00Z", "date_only": false, "value": "2026-09-11T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2026-42016", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "b3858317-0028-4305-afb3-9242c16e2e1a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-11T00:00:00Z", "date_only": false, "value": "2026-09-11T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-42016", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-11T00:00:00Z", "date_only": false, "value": "2026-09-11T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-42016", "record": "FKIE_CVE-2026-42016", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-11T00:00:00Z", "date_only": false, "value": "2026-09-11T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2026-42016", "field": "status.status_updated_at", "uuid": "b3858317-0028-4305-afb3-9242c16e2e1a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-11T00:00:00Z", "date_only": false, "value": "2026-09-11T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-42016", "field": "containers.adp.0.timeline.0.time"}, {"timestamp": "2026-09-11T11:18:06.517Z", "date_only": false, "value": "2026-09-11T11:18:06.517224Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mvagykfodd2y", "record": "CVE-2026-42016", "field": "creation_timestamp", "uuid": "d532e850-13e4-440a-84ed-345edc2ee381", "content": "Here we go again with self-hosted deployments taking the hit, as intruders gracefully chain CVE-2026-42018 and CVE-2026-42016 to turn an anonymous token into full admin glory. Sparing us the suspense, they planted backdoors and minted rogue credentials in software build repositor...\n\nRead full story", "url": "https://bsky.app/profile/cerberusit.bsky.social/post/3mvagykfodd2y"}, {"timestamp": "2026-09-11T17:16:08.886Z", "date_only": false, "value": "2026-09-11T17:16:08.886609Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvb2yrezak2g", "record": "CVE-2026-42016", "field": "creation_timestamp", "uuid": "b21b233b-4f39-43f6-bad2-f09bcbc913bd", "content": "\ud83e\udd16 JFrog Artifactory under active attack: CVE-2026-42018 + CVE-2026-42016 chained to bypass auth, gain admin and deploy a Rust backdoor. Critical auth bypass CVE-2026-82329 also\u2026", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mvb2yrezak2g"}, {"timestamp": "2026-09-11T18:35:05.548Z", "date_only": false, "value": "2026-09-11T18:35:05.548300Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mvb7frq45t25", "record": "CVE-2026-42016", "field": "creation_timestamp", "uuid": "1572ecb9-0af6-4a65-ac00-d1358d88871e", "content": "\ud83d\uded1 CVE-2026-42016\nJFrog Artifactory\nCVSS 8.1 / EPSS 0% / KEV: No\nTL;DR: JFrog Artifactory (Self Hosted) versions before 7.133.11 are vulnerable to a privilege es\u2026\nhttps://cvesentinel.com/report/CVE-2026-42016?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "url": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mvb7frq45t25"}, {"timestamp": "2026-09-11T18:45:50.577Z", "date_only": false, "value": "2026-09-11T18:45:50.577693Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mvb7z4zttq2q", "record": "CVE-2026-42016", "field": "creation_timestamp", "uuid": "a075399b-387e-4c40-8671-baa064ed06eb", "content": "Wiz Research has reported active exploitation of three vulnerabilities in JFrog Artifactory: CVE-2026-42016, CVE-2026-42018, and CVE-2026-82329. These vulnerabilities allow attackers to bypass authentication, escalate privileges, and gain administrative control.", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3mvb7z4zttq2q"}, {"timestamp": "2026-09-11T19:00:01Z", "date_only": false, "value": "2026-09-11T19:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2026-42016", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "b3858317-0028-4305-afb3-9242c16e2e1a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-11T19:00:02.654Z", "date_only": false, "value": "2026-09-11T19:00:02.654844Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b3858317-0028-4305-afb3-9242c16e2e1a", "record": "CVE-2026-42016", "field": "creation_timestamp", "uuid": "8a73c07e-3377-4029-9654-163dee726e40", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b3858317-0028-4305-afb3-9242c16e2e1a", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-11T20:00:02Z", "date_only": false, "value": "2026-09-11T20:00:02+00:00", "kind": "kev", "label": "Recorded", "source": "previdian", "record": "CVE-2026-42016", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "2baa9521-973e-45a7-bbcf-f7ec1e2d5f93", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-11T20:01:21.046Z", "date_only": false, "value": "2026-09-11T20:01:21.046578Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2baa9521-973e-45a7-bbcf-f7ec1e2d5f93", "record": "CVE-2026-42016", "field": "creation_timestamp", "uuid": "24ff05cf-8946-4c57-9c10-47fde659b625", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2baa9521-973e-45a7-bbcf-f7ec1e2d5f93", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-11T20:02:06.968Z", "date_only": false, "value": "2026-09-11T20:02:06.968699Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mvbebkesu52f", "record": "CVE-2026-42016", "field": "creation_timestamp", "uuid": "2d6c0917-8c85-4ea1-8ebe-f0d436749e81", "content": "~Cisa~\nCISA warns of active exploitation targeting JFrog Artifactory and ScreenConnect; prioritize remediation.\n-\nIOCs: CVE-2026-42016, CVE-2026-42018, CVE-2026-84869\n-\n#CISA #KEV #ThreatIntel", "url": "https://bsky.app/profile/cyfar.ca/post/3mvbebkesu52f"}, {"timestamp": "2026-09-11T21:31:06Z", "date_only": false, "value": "2026-09-11T21:31:06Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-58CV-8CFM-C8R8", "record": "GHSA-58CV-8CFM-C8R8", "field": "modified"}, {"timestamp": "2026-09-11T22:38:22.581Z", "date_only": false, "value": "2026-09-11T22:38:22.581311Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/csirts.com/post/3mvbmyxjle52x", "record": "CVE-2026-42016", "field": "creation_timestamp", "uuid": "c9185887-197b-46c9-a9e8-23e29a652a97", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-42016: JFrog Artifactory Incorrect Authorization Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-42016", "url": "https://bsky.app/profile/csirts.com/post/3mvbmyxjle52x"}, {"timestamp": "2026-09-12T00:15:05.302Z", "date_only": false, "value": "2026-09-12T00:15:05.302203Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/jfrog-security-advisory-av26-867", "record": "CVE-2026-42016", "field": "creation_timestamp", "uuid": "b8528b39-f1d0-410d-a536-4b5ec19f0dbc", "url": "https://cyber.gc.ca/en/alerts-advisories/jfrog-security-advisory-av26-867"}, {"timestamp": "2026-09-12T00:22:01.338Z", "date_only": false, "value": "2026-09-12T00:22:01.338766Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mvbsscpkkq2i", "record": "CVE-2026-42016", "field": "creation_timestamp", "uuid": "1461cbf8-a79e-4b35-af73-17f728db0956", "content": "CVE-2026-42016 is trending. Hype score 7, currently #8 on cvemon.\n\nJFrog Artifactory (Self Hosted) versions before 7.133.11 are vulnerable to a privilege escalation attack due to a validation check of the token signature/issuer and not the token\u2019s\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-42016", "url": "https://bsky.app/profile/cvemon.bsky.social/post/3mvbsscpkkq2i"}, {"timestamp": "2026-09-12T01:22:15.513Z", "date_only": false, "value": "2026-09-12T01:22:15.513134Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvbw5z6i2f2p", "record": "CVE-2026-42016", "field": "creation_timestamp", "uuid": "9ffabaea-818c-454c-b889-3df81212a051", "content": "\ud83e\udd16 JFrog Artifactory chain (CVE-2026-42018 + CVE-2026-42016) exploited in the wild: auth bypass to admin, then Rust backdoor with C2 on self-hosted instances (Wiz). Patch now.\nhttps://www.bleepingcomputer.com/news/security/artifactory-flaws-chained-in-attacks-deploying-backdoor-malware/", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mvbw5z6i2f2p"}, {"timestamp": "2026-09-12T03:55:20.650Z", "date_only": false, "value": "2026-09-12T03:55:20.650Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-42016", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-12T03:55:20.650Z", "date_only": false, "value": "2026-09-12T03:55:20.650Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-42016", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-12T06:30:49.559Z", "date_only": false, "value": "2026-09-12T06:30:49.559883Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mvchfrowy62e", "record": "CVE-2026-42016", "field": "creation_timestamp", "uuid": "297246c8-cbc0-4268-a3f6-c71cd477902e", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-42016: \u26a0\ufe0f CVE-2026-42016: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 0.3%\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2026-42016-jfrog-artifactory-self-hosted-versions-before", "url": "https://bsky.app/profile/threatspotai.bsky.social/post/3mvchfrowy62e"}, {"timestamp": "2026-09-12T07:42:29.566Z", "date_only": false, "value": "2026-09-12T07:42:29.566980Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mvclfweok62z", "record": "CVE-2026-42016", "field": "creation_timestamp", "uuid": "ab9b4d71-3ec9-4512-bb61-aaae0ae35a98", "content": "Artifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329 #appsec", "url": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mvclfweok62z"}, {"timestamp": "2026-09-12T19:00:35.365Z", "date_only": false, "value": "2026-09-12T19:00:35.365051Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2026/09/cisa-adds-5-actively-exploited.html", "record": "CVE-2026-42016", "field": "creation_timestamp", "uuid": "62f593ec-9fd8-4db2-be48-fc74b9a92f30", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added five security flaws impacting JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation in the wild.\n\nDetails of the vulnerabilities are as follows -\n\n\n  CVE-2026-42016 (CVSS score: 8.1) - An incorrect authorization", "url": "https://thehackernews.com/2026/09/cisa-adds-5-actively-exploited.html"}, {"timestamp": "2026-09-12T20:42:35.490Z", "date_only": false, "value": "2026-09-12T20:42:35.490468Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvdwytfj4u2z", "record": "CVE-2026-42016", "field": "creation_timestamp", "uuid": "8b6e6b22-a02f-42f3-b677-e85e98d4b235", "content": "\ud83e\udd16 CISA adds 5 actively exploited flaws to KEV: JFrog Artifactory, ConnectWise ScreenConnect, MikroTik RouterOS. Includes CVE-2026-42016 (CVSS 8.1). Patch or isolate exposed instances.\n\nhttps://thehackernews.com/2026/09/cisa-adds-5-actively-exploited.html", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mvdwytfj4u2z"}, {"timestamp": "2026-09-13T06:50:53.364Z", "date_only": false, "value": "2026-09-13T06:50:53.364412Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mveyykvrru24", "record": "CVE-2026-42016", "field": "creation_timestamp", "uuid": "8e5942a6-a5b5-40d7-8b1c-b8b2f96f0a87", "content": "\ud83e\udd16 CISA adds 5 actively exploited flaws to KEV: JFrog Artifactory (CVE-2026-42016), ConnectWise ScreenConnect, MikroTik RouterOS. Patch now.\nhttps://thehackernews.com/2026/09/cisa-adds-5-actively-exploited.html", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mveyykvrru24"}, {"timestamp": "2026-09-13T12:54:32.627Z", "date_only": false, "value": "2026-09-13T12:54:32.627327Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mvfnctexr424", "record": "CVE-2026-42016", "field": "creation_timestamp", "uuid": "1cec446b-86e4-4279-b273-de1097d70c5b", "content": "Artifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329", "url": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mvfnctexr424"}, {"timestamp": "2026-09-13T16:25:43.145Z", "date_only": false, "value": "2026-09-13T16:25:43.145364Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/suriq.io/post/3mvfz4gm3ea2t", "record": "CVE-2026-42016", "field": "creation_timestamp", "uuid": "dadc6e05-1dfa-45a5-80df-93d6bbcd48bd", "content": "\ud83d\udd34 EXPLOITED\n\nSelf-managed JFrog Artifactory: CISA flagged two more flaws (CVE-2026-42016 + CVE-2026-42018) as exploited.\n\nChained, they turn an unauthenticated request into admin in under five minutes.\n\nPatch, then rotate tokens and hunt for planted admins.", "url": "https://bsky.app/profile/suriq.io/post/3mvfz4gm3ea2t"}, {"timestamp": "2026-09-14T03:00:05.337Z", "date_only": false, "value": "2026-09-14T03:00:05.337646Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Fk7Bog3gVmVbuJndN5Dv-zI4yhjd1bLXC7_WPMmsFOdMwA", "record": "CVE-2026-42016", "field": "creation_timestamp", "uuid": "3bb607cd-29c2-44a8-97e9-cc648050141d"}, {"timestamp": "2026-09-14T05:01:51.278Z", "date_only": false, "value": "2026-09-14T05:01:51.278271Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mvhdej5zwj2p", "record": "CVE-2026-42016", "field": "creation_timestamp", "uuid": "6f8ab41d-4150-4813-a34d-8a9ba32966c2", "content": "CISA Adds Three Known Exploited Vulnerabilities to Catalog\uff08CISA\u3001\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f3\u4ef6\u306e\u8106\u5f31\u6027\u3092KEV\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\uff09 #CISA \uff08Sep 11\uff09 \n\nCVE-2026-42016 JFrog Artifactory\u306b\u304a\u3051\u308b\u8a8d\u8a3c\u30a8\u30e9\u30fc\u306e\u8106\u5f31\u6027 \nCVE-2026-42018 JFrog Artifactory\u306e\u8a8d\u8a3c\u30a8\u30e9\u30fc\u306e\u8106\u5f31\u6027 \nCVE-2026-84869 ConnectWise ScreenConnect\u306b\u304a\u3051\u308b\u4e0d\u9069\u5207\u306a\u6a29\u9650\u7ba1\u7406\u3068\u8a8d\u8a3c\u306e\u6b20\u843d\u306e\u8106\u5f31\u6027\n\nwww.cisa.gov/news-events/...", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3mvhdej5zwj2p"}, {"timestamp": "2026-09-14T10:00:42.376Z", "date_only": false, "value": "2026-09-14T10:00:42.376742Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/jfrog-rilevato-sfruttamento-in-rete-delle-vulnerabilita-cve-2026-42016-e-cve-2026-42018-in-artifactory", "record": "CVE-2026-42016", "field": "creation_timestamp", "uuid": "c94ef156-4bea-4a43-a9a4-b7d22364c2c6", "content": "Rilevato lo sfruttamento attivo in rete di due vulnerabilit\u00e0 con gravit\u00e0 \"alta\" - gi\u00e0 sanate dal vendor - relative al prodotto JFrog Artifactory, piattaforma per la gestione e distribuzione di artefatti software", "url": "https://www.acn.gov.it/portale/w/jfrog-rilevato-sfruttamento-in-rete-delle-vulnerabilita-cve-2026-42016-e-cve-2026-42018-in-artifactory"}, {"timestamp": "2026-09-14T17:11:21.436Z", "date_only": false, "value": "2026-09-14T17:11:21.436079Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mvim4r74k52z", "record": "CVE-2026-42016", "field": "creation_timestamp", "uuid": "b1264f9e-178a-4c49-bf05-89285180a6d3", "content": "CRITICAL CISA KEV ALERT: CVE-2026-42016 targets JFrog Artifactory via incorrect authorization and token scope flaws. Active exploitation verified. Access our TSUITE brief for Splunk, Sentinel, QRadar queries, and endpoint hardening steps to secure your software\u2026", "url": "https://bsky.app/profile/thecybermind.co/post/3mvim4r74k52z"}, {"timestamp": "2026-09-14T21:04:13.848Z", "date_only": false, "value": "2026-09-14T21:04:13.848763Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/theitnerd.ca/post/3mviz5ep5h22d", "record": "CVE-2026-42016", "field": "creation_timestamp", "uuid": "2d2de008-a223-4b30-85b2-798fd033d15a", "content": "Attackers are chaining three JFrog Artifactory bugs to plant admin backdoors\u00a0\n\nMultiple threat actors have been chaining three JFrog Artifactory vulnerabilities, CVE-2026-42018, CVE-2026-42016, and CVE-2026-82329, in active exploitation confirmed between August 15 and September 8, using two of the\u2026", "url": "https://bsky.app/profile/theitnerd.ca/post/3mviz5ep5h22d"}, {"timestamp": "2026-09-14T23:00:03.478Z", "date_only": false, "value": "2026-09-14T23:00:03.478377Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/8609", "record": "CVE-2026-42016", "field": "creation_timestamp", "uuid": "44f8d01a-38e7-46b3-b475-c5071e73759f", "content": "\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Wiz, n\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 JFrog Artifactory \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u0432. \u041e\u043d\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u041c\u043d\u043e\u0433\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 Artifactory \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u043c\u0438 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u0430\u043c\u0438, \u0431\u0438\u043d\u0430\u0440\u043d\u044b\u043c\u0438 \u0444\u0430\u0439\u043b\u0430\u043c\u0438, \u043c\u043e\u0434\u0435\u043b\u044f\u043c\u0438 \u0418\u0418, \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430\u043c\u0438 \u0438 \u043f\u0430\u043a\u0435\u0442\u0430\u043c\u0438.\n\n\u0422\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 - CVE-2026-42016, CVE-2026-42018 \u0438 CVE-2026-82329 - \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u0445 Artifactory.\n\nCVE-2026-42018, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f 12 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0430\u044f \u0441\u043e\u0431\u043e\u0439 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0442\u043e\u043a\u0435\u043d\u0430 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u0430\u043c \u0438 \u0434\u0430\u043d\u043d\u044b\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f.\u00a0\n\n\u0412\u0442\u043e\u0440\u0430\u044f CVE-2026-42016, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f 27 \u0438\u044e\u043b\u044f, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0442\u043e\u043a\u0435\u043d\u0430, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\u0422\u0440\u0435\u0442\u044c\u044f CVE-2026-82329, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f 28 \u0430\u0432\u0433\u0443\u0441\u0442\u0430, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0430 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\u00a0\u041e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445\u00a0\u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 \u0441\u043f\u0443\u0441\u0442\u044f.\n\n\u041a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u0432 Wiz, CVE-2026-42018 \u0438 CVE-2026-42016 \u0431\u044b\u043b\u0438 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0441 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u044b \u0430\u0432\u0433\u0443\u0441\u0442\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0442\u043e\u043a\u0435\u043d\u0430 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0435\u0433\u043e \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u0412 \u043f\u0435\u0440\u0438\u043e\u0434 \u0441 15 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 \u043f\u043e 8 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2026 \u0433\u043e\u0434\u0430 \u0432 Wiz \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0438, \u043a\u0430\u043a \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b\u0438 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b Artifactory, \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u044d\u0442\u0438 \u0434\u0432\u0435 CVE-2026-42018 \u0438 CVE-2026-42016.\n\n\u0425\u0430\u043a\u0435\u0440\u044b \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043b\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u043b\u0430\u0433\u0438\u043d\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043d\u0435\u0447\u043d\u0443\u044e \u0442\u043e\u0447\u043a\u0443 \u043f\u043b\u0430\u0433\u0438\u043d\u0430, \u0432\u043d\u0435\u0434\u0440\u044f\u043b\u0438 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u044d\u0442\u0430\u043f\u0430 \u0438 \u043f\u0435\u0440\u0438\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u043b\u0438 \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u0412 \u043f\u0435\u0440\u0432\u0443\u044e \u043d\u0435\u0434\u0435\u043b\u044e \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-82329 \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c, \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0442\u043e\u043a\u0435\u043d\u043e\u0432, \u043a\u0440\u0430\u0436\u0438 \u043a\u043b\u044e\u0447\u0435\u0439 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430 \u0438 \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u044f \u0430\u043a\u0442\u0438\u0432\u043e\u0432.\n\n\u0412 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0431\u044b\u043b\u043e \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u044f\u043b\u0438 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 SSH-\u043a\u043b\u044e\u0447\u0438 \u043a \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u043c \u0438\u043c\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0437\u0430\u043f\u0438\u0441\u044f\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u0412 CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 CVE-2026-42018 \u0438 CVE-2026-42016 \u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 KEV, \u0441\u043f\u0443\u0441\u0442\u044f \u043d\u0435\u0434\u0435\u043b\u044e \u043f\u043e\u0441\u043b\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f CVE-2026-82329 \u0432 \u044d\u0442\u043e\u0442 \u0436\u0435 \u0441\u043f\u0438\u0441\u043e\u043a.\n\n\u0412\u0441\u0435\u043c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f Artifactory \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 7.161.20, 7.146.38, 7.133.29, 7.125.20, 7.117.28 \u0438\u043b\u0438 7.111.21.", "url": "https://t.me/true_secator/8609"}, {"timestamp": "2026-09-15T00:00:08.341Z", "date_only": false, "value": "2026-09-15T00:00:08.341763Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/8609", "record": "CVE-2026-42016", "field": "creation_timestamp", "uuid": "34447e8a-f103-4b81-b336-38e55cf75efb", "content": "\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Wiz, n\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 JFrog Artifactory \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u0432. \u041e\u043d\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u041c\u043d\u043e\u0433\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 Artifactory \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u043c\u0438 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u0430\u043c\u0438, \u0431\u0438\u043d\u0430\u0440\u043d\u044b\u043c\u0438 \u0444\u0430\u0439\u043b\u0430\u043c\u0438, \u043c\u043e\u0434\u0435\u043b\u044f\u043c\u0438 \u0418\u0418, \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430\u043c\u0438 \u0438 \u043f\u0430\u043a\u0435\u0442\u0430\u043c\u0438.\n\n\u0422\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 - CVE-2026-42016, CVE-2026-42018 \u0438 CVE-2026-82329 - \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u0445 Artifactory.\n\nCVE-2026-42018, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f 12 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0430\u044f \u0441\u043e\u0431\u043e\u0439 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0442\u043e\u043a\u0435\u043d\u0430 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u0430\u043c \u0438 \u0434\u0430\u043d\u043d\u044b\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f.\u00a0\n\n\u0412\u0442\u043e\u0440\u0430\u044f CVE-2026-42016, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f 27 \u0438\u044e\u043b\u044f, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0442\u043e\u043a\u0435\u043d\u0430, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\u0422\u0440\u0435\u0442\u044c\u044f CVE-2026-82329, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f 28 \u0430\u0432\u0433\u0443\u0441\u0442\u0430, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0430 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\u00a0\u041e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445\u00a0\u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 \u0441\u043f\u0443\u0441\u0442\u044f.\n\n\u041a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u0432 Wiz, CVE-2026-42018 \u0438 CVE-2026-42016 \u0431\u044b\u043b\u0438 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0441 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u044b \u0430\u0432\u0433\u0443\u0441\u0442\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0442\u043e\u043a\u0435\u043d\u0430 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0435\u0433\u043e \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u0412 \u043f\u0435\u0440\u0438\u043e\u0434 \u0441 15 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 \u043f\u043e 8 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2026 \u0433\u043e\u0434\u0430 \u0432 Wiz \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0438, \u043a\u0430\u043a \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b\u0438 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b Artifactory, \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u044d\u0442\u0438 \u0434\u0432\u0435 CVE-2026-42018 \u0438 CVE-2026-42016.\n\n\u0425\u0430\u043a\u0435\u0440\u044b \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043b\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u043b\u0430\u0433\u0438\u043d\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043d\u0435\u0447\u043d\u0443\u044e \u0442\u043e\u0447\u043a\u0443 \u043f\u043b\u0430\u0433\u0438\u043d\u0430, \u0432\u043d\u0435\u0434\u0440\u044f\u043b\u0438 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u044d\u0442\u0430\u043f\u0430 \u0438 \u043f\u0435\u0440\u0438\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u043b\u0438 \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u0412 \u043f\u0435\u0440\u0432\u0443\u044e \u043d\u0435\u0434\u0435\u043b\u044e \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-82329 \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c, \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0442\u043e\u043a\u0435\u043d\u043e\u0432, \u043a\u0440\u0430\u0436\u0438 \u043a\u043b\u044e\u0447\u0435\u0439 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430 \u0438 \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u044f \u0430\u043a\u0442\u0438\u0432\u043e\u0432.\n\n\u0412 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0431\u044b\u043b\u043e \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u044f\u043b\u0438 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 SSH-\u043a\u043b\u044e\u0447\u0438 \u043a \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u043c \u0438\u043c\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0437\u0430\u043f\u0438\u0441\u044f\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u0412 CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 CVE-2026-42018 \u0438 CVE-2026-42016 \u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 KEV, \u0441\u043f\u0443\u0441\u0442\u044f \u043d\u0435\u0434\u0435\u043b\u044e \u043f\u043e\u0441\u043b\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f CVE-2026-82329 \u0432 \u044d\u0442\u043e\u0442 \u0436\u0435 \u0441\u043f\u0438\u0441\u043e\u043a.\n\n\u0412\u0441\u0435\u043c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f Artifactory \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 7.161.20, 7.146.38, 7.133.29, 7.125.20, 7.117.28 \u0438\u043b\u0438 7.111.21.", "url": "https://t.me/true_secator/8609", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-15T00:00:31.494Z", "date_only": false, "value": "2026-09-15T00:00:31.494962Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/Fk7Bog3gVmVbuJndN5Dv-zI4yhjd1bLXC7_WPMmsFOdMwA", "record": "CVE-2026-42016", "field": "creation_timestamp", "uuid": "91e6e9ce-f0b2-4243-a350-ab19eada6839", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-16T07:26:20.138Z", "date_only": false, "value": "2026-09-16T07:26:20.138615Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvmmepmfbd2l", "record": "CVE-2026-42016", "field": "creation_timestamp", "uuid": "d43cb6c9-a36d-44b9-8b5a-d08e84dca916", "content": "CISA added CVE-2026-42016 & CVE-2026-42018 (JFrog Artifactory) and CVE-2026-84869 (ConnectWise ScreenConnect) to KEV \u2014 patch external instances now. https://cti.securitycyber.uk", "url": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvmmepmfbd2l"}, {"timestamp": "2026-09-16T13:24:10.915Z", "date_only": false, "value": "2026-09-16T13:24:10.915945Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mvnael3tjq2y", "record": "CVE-2026-42016", "field": "creation_timestamp", "uuid": "5b1fb009-2916-430f-82a2-38769018937f", "content": "(CISA CS-MAN) The Cyber Mind CSUITE Brief: CVE-2026-42016 \u2013 JFrog Artifactory Incorrect Authorization\u00a0Vulnerability\n\nC-Suite threat intelligence for CVE-2026-42016, covering OAuth scope validation, lateral movement detection, and repository hardening across JFrog\u2026\n\nhttps://thecybermind.co/0vaa", "url": "https://bsky.app/profile/thecybermind.co/post/3mvnael3tjq2y"}, {"timestamp": "2026-09-18T08:07:04.094Z", "date_only": false, "value": "2026-09-18T08:07:04.094776Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/billingsley.bsky.social/post/3mvrpldtsjg2f", "record": "CVE-2026-42016", "field": "creation_timestamp", "uuid": "b7d4b6be-0e6c-4279-b65f-deaa4e8f42ab", "content": "COGNOSCERE Tech Brief \u2014 2026-09-18\n\nThree critical JFrog Artifactory vulnerabilities \u2014 CVE-2026-42016, 42018, and 82\n\nhttps://www.cognoscerellc.com/news", "url": "https://bsky.app/profile/billingsley.bsky.social/post/3mvrpldtsjg2f"}, {"timestamp": "2026-09-18T22:00:28.392Z", "date_only": false, "value": "2026-09-18T22:00:28.392054Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpacketai.bsky.social/post/3mvt65negfe2u", "record": "cve-2026-42016", "field": "creation_timestamp", "uuid": "0cb6e010-ced3-440b-9611-cb976c1b2f4b", "content": "JFrog Artifactory under active attack: researchers confirm in-the-wild exploitation of three critical vulns chained for admin access. If you're serving\u2026\n\nhttps://www.wiz.io/blog/artifactory-under-attack-in-the-wild-exploitation-of-cve-2026-42016-cve-2026-4201\n\n#appsec #DevSecOps", "url": "https://bsky.app/profile/getpacketai.bsky.social/post/3mvt65negfe2u"}, {"timestamp": "2026-09-25T00:00:00Z", "date_only": true, "value": "2026-09-25", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2026-42016", "field": "evidence.0.details.due_date", "uuid": "b3858317-0028-4305-afb3-9242c16e2e1a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-12T20:08:46.776Z", "date_only": false, "value": "2026-10-12T20:08:46.776976Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mxpd3xncu22i", "record": "CVE-2026-42016", "field": "creation_timestamp", "uuid": "1824f13a-22b1-4536-9430-3bd194158e95", "content": "\u30cf\u30c3\u30ab\u30fc\u304cJFrog Artifactory\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u3001\u8a8d\u8a3c\u3092\u56de\u907f\u3057\u3066\u7ba1\u7406\u8005\u6a29\u9650\u3092\u53d6\u5f97\n\n\u653b\u6483\u8005\u306f\u3001JFrog Artifactory \u306e 3 \u3064\u306e\u8106\u5f31\u6027 (CVE-2026-42016\u3001CVE-2026-42018\u3001\u304a\u3088\u3073 CVE-2026-82329) \u3092\u7a4d\u6975\u7684\u306b\u60aa\u7528\u3057\u3001\u8a8d\u8a3c\u3092\u56de\u907f\u3057\u3001\u6a29\u9650\u3092\u6607\u683c\u3055\u305b\u3001\u516c\u958b\u3055\u308c\u3066\u3044\u308b\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u306e\u7ba1\u7406\u5236\u5fa1\u6a29\u3092\u53d6\u5f97\u3057\u3066\u3044\u307e\u3059\u3002\n\nWiz Research\u306e\u5831\u544a\u306b\u3088\u308b\u3068\u3001\u8907\u6570\u306e\u653b\u6483\u8005\u304c\u30012\u3064\u306e\u30d0\u30b0\u3092\u5229\u7528\u3057\u305f\u30c8\u30fc\u30af\u30f3\u6607\u683c\u30c1\u30a7\u30fc\u30f3\u3068\u3001\u5225\u306e\u91cd\u5927\u306a\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u306e\u8106\u5f31\u6027\u306e\u4e21\u65b9\u3092\u7528\u3044\u3066\u3001\u5b9f\u74b0\u5883\u3067\u81ea\u5df1\u30db\u30b9\u30c8\u3055\u308c\u3066\u3044\u308bArtifactory\u306e\u30c7\u30d7\u30ed\u30a4\u30e1\u30f3\u30c8\u3092\u6a19\u7684\u306b\u3057...", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mxpd3xncu22i"}, {"timestamp": "2026-10-14T13:11:07.402Z", "date_only": false, "value": "2026-10-14T13:11:07.402200Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mxtmoykv2c2x", "record": "CVE-2026-42016", "field": "creation_timestamp", "uuid": "b5ff8c10-c66b-4340-a1a9-f81b7fe3cc4f", "content": "JFrog Artifactory\u306e3\u3064\u306e\u8106\u5f31\u6027\u304c\u30d0\u30c3\u30af\u30c9\u30a2\u5c55\u958b\u306b\u60aa\u7528\u3055\u308c\u308b\n\n\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4f01\u696dWiz\u306e\u5831\u544a\u306b\u3088\u308b\u3068\u3001\u653b\u6483\u8005\u306fJFrog Artifactory\u306b\u5b58\u5728\u3059\u308b3\u3064\u306e\u6df1\u523b\u306a\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u3001\u30b7\u30b9\u30c6\u30e0\u3092\u4fb5\u5bb3\u3057\u3066\u30d0\u30c3\u30af\u30c9\u30a2\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u3066\u3044\u308b\u3002\n\n\u591a\u304f\u306e\u7d44\u7e54\u304c\u3001\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u6210\u679c\u7269\u3001\u30d0\u30a4\u30ca\u30ea\u3001AI\u30e2\u30c7\u30eb\u3001\u30b3\u30f3\u30c6\u30ca\u3001\u30d1\u30c3\u30b1\u30fc\u30b8\u306e\u7ba1\u7406\u306bArtifactory\u3092\u4f7f\u7528\u3057\u3066\u3044\u307e\u3059\u3002\n\nCVE-2026-42016\u3001CVE-2026-42018\u3001\u304a\u3088\u3073CVE-2026-82329\u306e3\u3064\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u653b\u6483\u8005\u306f\u8a8d\u8a3c\u3092\u56de\u907f\u3057\u3001\u8106\u5f31\u306aArtifactory\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u4e0a\u3067\u7ba1\u7406\u8005\u6a29\u9650\u3092\u53d6\u5f97\u3067\u304d\u308b...", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mxtmoykv2c2x"}, {"timestamp": "2026-10-14T13:16:45.164Z", "date_only": false, "value": "2026-10-14T13:16:45.164556Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mxtmz2hh7k2x", "record": "CVE-2026-42016", "field": "creation_timestamp", "uuid": "ed0a49f8-9809-4f78-9ca7-d7f808599dc3", "content": "\u7c73\u56fd\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001GitLab\u3001JFrog Artifactory\u3001\u304a\u3088\u3073ConnectWise ScreenConnect\u306e\u8106\u5f31\u6027\u3092\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u305f\u3002\n\n\u7c73\u56fd\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001[ 1 , 2 ]\u4ee5\u4e0b\u306e\u8106\u5f31\u6027\u3092 \u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\uff08KEV\uff09\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u307e\u3057\u305f\u3002\n\nCVE-2026-42016  \uff08CVSS\u30b9\u30b3\u30a28.1\uff09JFrog Artifactory\u306e\u8a8d\u8a3c\u30a8\u30e9\u30fc\u306e\u8106\u5f31\u6027 \nCVE-2026-42018  \uff08CVSS\u30b9\u30b3\u30a27.5\uff09JFrog Ar...", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mxtmz2hh7k2x"}, {"timestamp": "2026-10-24T13:10:00.147Z", "date_only": false, "value": "2026-10-24T13:10:00.147", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-42016", "record": "FKIE_CVE-2026-42016", "field": "lastModified"}], "metrics": {"as_of": "2026-10-29T17:59:15.386Z", "anchors": {"origin": {"timestamp": "2026-07-27T19:20:56.352Z", "date_only": false, "value": "2026-07-27T19:20:56.352Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-42016", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-07-27T19:20:56.352Z", "date_only": false, "value": "2026-07-27T19:20:56.352Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-42016", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": {"timestamp": "2026-09-10T19:04:00Z", "date_only": false, "value": "2026-09-10T19:04:00+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-42016", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "2baa9521-973e-45a7-bbcf-f7ec1e2d5f93", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 3886983.648, "hours": 1079.71768, "days": 44.988236666666666, "min_seconds": 3886983.648, "max_seconds": 3886983.648, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-27T19:20:56.352Z", "date_only": false, "value": "2026-07-27T19:20:56.352Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-42016", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-09-10T19:04:00Z", "date_only": false, "value": "2026-09-10T19:04:00+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-42016", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "2baa9521-973e-45a7-bbcf-f7ec1e2d5f93", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 3886983.648, "hours": 1079.71768, "days": 44.988236666666666, "min_seconds": 3886983.648, "max_seconds": 3886983.648, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-27T19:20:56.352Z", "date_only": false, "value": "2026-07-27T19:20:56.352Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-42016", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-09-10T19:04:00Z", "date_only": false, "value": "2026-09-10T19:04:00+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-42016", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "2baa9521-973e-45a7-bbcf-f7ec1e2d5f93", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 8116699.034291, "hours": 2254.638620636389, "days": 93.94327585984954, "min_seconds": 8116699.034291, "max_seconds": 8116699.034291, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-07-27T19:20:56.352Z", "date_only": false, "value": "2026-07-27T19:20:56.352Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-42016", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-29T17:59:15.386Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 4229715.386291, "hours": 1174.9209406363889, "days": 48.95503919318287, "min_seconds": 4229715.386291, "max_seconds": 4229715.386291, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-09-10T19:04:00Z", "date_only": false, "value": "2026-09-10T19:04:00+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-42016", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "2baa9521-973e-45a7-bbcf-f7ec1e2d5f93", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-10-29T17:59:15.386Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}