Attackers Chain JFrog Artifactory Flaws to Gain Admin Control and Plant Backdoors
Attackers chained JFrog Artifactory flaws CVE-2026-42018 and CVE-2026-42016 for admin control, planting Rust backdoors; CVE-2026-82329 also mass-exploited.
92
Malware
Rust backdoor
- Mentions · 7d0
- Mentions · 30d0
- All mentions3
- First seenAug 21, 2026
- Last mentionedSep 11, 2026
Timeline
3 articles · newest firstArtifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329
Wiz Research confirms in-the-wild exploitation of three JFrog Artifactory vulnerabilities, chained to gain administrative control, deploy Groovy plugins, and install Rust backdoors.
85
North Korean Hackers Tied to Rust Supply Chain Attack
Researchers linked a backdoor hidden in compromised Rust packages to North Korean actors' prior software supply chain attack campaigns.
58
Related CVEs
by mentions- CVE-2026-8232914%9.8Improper Authentication in JFrog Artifactory Allows Unauthenticated Admin Access
- CVE-2026-420169%8.8Token Scope Validation Flaw Enables Privilege Escalation in JFrog Artifactory
- CVE-2026-4201810%7.5Improper Authentication in JFrog Artifactory Exposes Internal Anonymous Tokens
Appears with
- JFrog Artifactoryproduct · 2
- Wizvendor · 2
- JFrogvendor · 2
- Fastlyvendor · 1
- Rustproduct · 1
- North Korean threat actorsthreat actor · 1
- Infosecurity Magazinevendor · 1
- CISAvendor · 1
- Wiz Researchorganization · 1
- CISAorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.