Hackers Exploit JFrog Artifactory Flaws to Bypass Authentication and Gain Admin Access

Active exploitation of three critical JFrog Artifactory vulnerabilities (CVE-2026-82329, CVE-2026-42018, CVE-2026-42016) enables unauthenticated or escalated administrative access; attackers have been observed obtaining admin-scoped tokens, creating persistent admin users, deploying malicious Groovy plugins, and installing Rust-based backdoors. The report lists affected and fixed versions, provides IoCs (IPs, payload URLs, file hash, account name patterns, C2 address), and urges urgent patching, network restrictions, and log review to mitigate supply-chain and repository compromise risks.