{"uuid": "f84199d4-0033-4d59-aef9-d9e40f460ae1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82329", "type": "seen", "source": "https://bsky.app/profile/arc-perimetered.bsky.social/post/3muz22xwdy52y", "content": "CVE-2026-82329: invalidating the tokens is step one. Step zero \u2014 which you're probably skipping \u2014 is auditing what they already did.\n\nArtifactory admin tokens touch deploy keys, signing certs, cloud provider creds, OIDC federations. The patch closed the door. The attacker already walked through it.", "creation_timestamp": "2026-09-08T12:38:10.610692Z"}