https://vulnerability.circl.lu/sightings/feed 2026-09-11T23:22:39.317369+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/1c216184-323a-4bc8-b0d1-b1754af9cdb6/export 2026-09-11T23:22:39.347094+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "1c216184-323a-4bc8-b0d1-b1754af9cdb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42018", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mvbmyxvpwy2i", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-42018: JFrog Artifactory Improper Authentication Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-42018", "creation_timestamp": "2026-09-11T22:38:23.249585Z"} 2026-09-11T22:38:23.249585+00:00 https://vulnerability.circl.lu/sighting/4556899d-3b3c-4aeb-815a-b767557b9f7f/export 2026-09-11T23:22:39.349265+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4556899d-3b3c-4aeb-815a-b767557b9f7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42018", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mvbebkesu52f", "content": "~Cisa~\nCISA warns of active exploitation targeting JFrog Artifactory and ScreenConnect; prioritize remediation.\n-\nIOCs: CVE-2026-42016, CVE-2026-42018, CVE-2026-84869\n-\n#CISA #KEV #ThreatIntel", "creation_timestamp": "2026-09-11T20:02:07.015604Z"} 2026-09-11T20:02:07.015604+00:00 https://vulnerability.circl.lu/sighting/9f35fc9d-8795-4153-8278-b1b1ae97dafb/export 2026-09-11T23:22:39.349398+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "9f35fc9d-8795-4153-8278-b1b1ae97dafb", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42018", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/43719310-bca4-4146-99da-52be865a9473", "content": "", "creation_timestamp": "2026-09-11T20:01:20.649395Z"} 2026-09-11T20:01:20.649395+00:00 https://vulnerability.circl.lu/sighting/03b9b784-9548-409c-9c7a-b4594d7431fb/export 2026-09-11T23:22:39.349499+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "03b9b784-9548-409c-9c7a-b4594d7431fb", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42018", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c9519166-323e-490a-9953-a332398615ad", "content": "", "creation_timestamp": "2026-09-11T19:00:02.769061Z"} 2026-09-11T19:00:02.769061+00:00 https://vulnerability.circl.lu/sighting/1c20ad62-6320-47dc-a1f0-e236f46eca98/export 2026-09-11T23:22:39.349612+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "1c20ad62-6320-47dc-a1f0-e236f46eca98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42018", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mvb7z4zttq2q", "content": "Wiz Research has reported active exploitation of three vulnerabilities in JFrog Artifactory: CVE-2026-42016, CVE-2026-42018, and CVE-2026-82329. These vulnerabilities allow attackers to bypass authentication, escalate privileges, and gain administrative control.", "creation_timestamp": "2026-09-11T18:45:50.631381Z"} 2026-09-11T18:45:50.631381+00:00 https://vulnerability.circl.lu/sighting/70d0097f-d467-4233-8d95-e7a71b27cdb9/export 2026-09-11T23:22:39.349712+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "70d0097f-d467-4233-8d95-e7a71b27cdb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42018", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mvb7fskkek2g", "content": "\ud83d\uded1 CVE-2026-42018\nJFrog Artifactory\nCVSS 7.5 / EPSS 0% / KEV: No\nTL;DR: JFrog Artifactory could return an internal anonymous-user token to an unauthenticated cal\u2026\nhttps://cvesentinel.com/report/CVE-2026-42018?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-09-11T18:35:06.486134Z"} 2026-09-11T18:35:06.486134+00:00 https://vulnerability.circl.lu/sighting/85d23eaf-7a00-4df4-9197-6771380ff695/export 2026-09-11T23:22:39.349804+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "85d23eaf-7a00-4df4-9197-6771380ff695", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42018", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvb2yrezak2g", "content": "\ud83e\udd16 JFrog Artifactory under active attack: CVE-2026-42018 + CVE-2026-42016 chained to bypass auth, gain admin and deploy a Rust backdoor. Critical auth bypass CVE-2026-82329 also\u2026", "creation_timestamp": "2026-09-11T17:16:08.837777Z"} 2026-09-11T17:16:08.837777+00:00 https://vulnerability.circl.lu/sighting/63a5d98f-4bda-4bb6-ac9b-44bb0b396942/export 2026-09-11T23:22:39.349890+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "63a5d98f-4bda-4bb6-ac9b-44bb0b396942", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42018", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mvagykfodd2y", "content": "Here we go again with self-hosted deployments taking the hit, as intruders gracefully chain CVE-2026-42018 and CVE-2026-42016 to turn an anonymous token into full admin glory. Sparing us the suspense, they planted backdoors and minted rogue credentials in software build repositor...\n\nRead full story", "creation_timestamp": "2026-09-11T11:18:06.436959Z"} 2026-09-11T11:18:06.436959+00:00 https://vulnerability.circl.lu/sighting/92688b67-bda7-4c67-9414-1efc096cbfd4/export 2026-09-11T23:22:39.349978+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "92688b67-bda7-4c67-9414-1efc096cbfd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42018", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mvad2st2xw2u", "content": "\u30cf\u30c3\u30ab\u30fc\u304cJFrog Artifactory\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3001\u8a8d\u8a3c\u3092\u30d0\u30a4\u30d1\u30b9\u3057\u3066\u7ba1\u7406\u8005\u6a29\u9650\u3092\u596a\u53d6\n\n\u8105\u5a01\u30a2\u30af\u30bf\u30fc\u304c\u3001JFrog Artifactory\u306e3\u4ef6\u306e\u8106\u5f31\u6027CVE-2026-42016\u3001CVE-2026-42018\u3001CVE-2026-82329\u3092\u7a4d\u6975\u7684\u306b\u60aa\u7528\u3057\u3001\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u3001\u6a29\u9650\u6607\u683c\u3092\u7d4c\u3066\u3001\u516c\u958b\u3055\u308c\u3066\u3044\u308b\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u306e\u7ba1\u7406\u8005\u6a29\u9650\u3092\u596a\u53d6\u3057\u3066\u3044\u308b\u3053\u3068\u304c\u5206\u304b\u308a\u307e\u3057\u305f\u3002 Wiz Research\u306e\u5831\u544a\u306b\u3088\u308b\u3068\u3001\u8907\u6570...", "creation_timestamp": "2026-09-11T10:07:47.385578Z"} 2026-09-11T10:07:47.385578+00:00 https://vulnerability.circl.lu/sighting/30c687dc-e3c8-43af-83e7-62f5b6fb93c1/export 2026-09-11T23:22:39.350073+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "30c687dc-e3c8-43af-83e7-62f5b6fb93c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42018", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mva74qcuco2s", "content": "\u30cf\u30c3\u30ab\u30fc\u304cJFrog Artifactory\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3001\u8a8d\u8a3c\u3092\u30d0\u30a4\u30d1\u30b9\u3057\u3066\u7ba1\u7406\u8005\u6a29\u9650\u3092\u53d6\u5f97\n\n\u8105\u5a01\u30a2\u30af\u30bf\u30fc\u304cJFrog Artifactory\u306e3\u4ef6\u306e\u8106\u5f31\u6027\u3001\u3059\u306a\u308f\u3061CVE-2026-42016\u3001CVE-2026-42018\u3001CVE-2026-82329\u3092\u7a4d\u6975\u7684\u306b\u60aa\u7528\u3057\u3001\u8a8d\u8a3c\u3092\u30d0\u30a4\u30d1\u30b9\u3057\u3066\u6a29\u9650\u3092\u6607\u683c\u3055\u305b\u3001\u516c\u958b\u3055\u308c\u3066\u3044\u308b\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u306e\u7ba1\u7406\u8005\u6a29\u9650\u3092\u638c\u63e1\u3057\u3066\u3044\u308b\u3053\u3068\u304c\u5206\u304b\u308a\u307e\u3057\u305f\u3002 Artifactory\u306f\u72ec\u81ea\u306e\u30bd...", "creation_timestamp": "2026-09-11T08:57:22.730824Z"} 2026-09-11T08:57:22.730824+00:00