Artifactory Under Attack: In-the-Wild Exploitation of CVE-2026-42016, CVE-2026-42018 & CVE-2026-82329

Wiz Research confirms active exploitation of three JFrog Artifactory vulnerabilities (CVE-2026-42016, CVE-2026-42018, CVE-2026-82329) that allow unauthenticated attackers to escalate privileges and obtain administrative control; observed activity includes creating persistent admin accounts, deploying malicious Groovy plugins for code execution, and installing Rust-based backdoors. The report provides exploitation patterns, impacted versions and fixes, behavioral detection indicators, remediation steps, and a list of IOCs to support investigation and response.