CloudThe Hacker News32 minutes ago
Attackers Chain JFrog Artifactory Flaws for Admin Control
1 min read
Cloud security company Wiz reported attackers chained two flaws in JFrog Artifactory to gain administrator control of self-hosted servers between August 15 and September 8. The attack chain, CVE-2026-42016 and CVE-2026-42018, allowed unauthenticated access to create admin tokens and install malicious Groovy plugins for code execution.
Level
Hype check
Tap to vote and see what everyone thinks.
