CVE-2026-42016
CRITICAL CISACVSS Score
N/A
Severity
CRITICAL
Source
CISA
Published
Sep 11, 2026
Description
JFrog — Artifactory: JFrog Artifactory contains an incorrect authorization vulnerability that allows leads to privilege escalation attack due to a validation check of the token signature/issuer and not the token’s scope.