Is CVE-2026-42018 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-42018?

CVE-2026-42018 has a CVSS v3 severity of HIGH (7.5).

Back

CVE-2026-42018

Description

JFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources.