Skip to content
Edition of Sunday, November 8, 2026
Daily CISO

The five-minute briefing for security leaders.

Security vendor · Software supply chain security · in CISA KEV

JFrog in the CISA KEV catalog

CISA’s Known Exploited Vulnerabilities catalog lists 4 entries for JFrog as of catalog version 2026.11.06, released November 6, 2026. The newest was added September 11, 2026, and the latest federal due date is September 25, 2026.

Updated

entries in the catalog
4
newest addition
September 11, 2026
latest federal due date
September 25, 2026
marked known ransomware use
0

Directory record

Website
jfrog.com
Categories
Software supply chain security (primary), Software composition analysis, Static application security testing, Secrets detection
Headquarters
HQ not established
Founded
Not established
Ownership
Public (Nasdaq: FROG)
Company record
JFrog on CISO Tribune

Directory data as of November 8, 2026. What the company sells, and the source for every fact, is on its CISO Tribune page.

KEV entries, newest first

Filed by CISA under the name “JFrog”. Each row links to the CVE’s NVD record; entries added in the last 45 days also link to their place on must-patch. The due date is CISA’s remediation deadline for federal civilian agencies, as the feed states it.

  1. Added September 11, 2026

    CVE-2026-42018 JFrog Artifactory Improper Authentication Vulnerability

    Artifactory

    Due September 25, 2026

  2. Added September 11, 2026

    CVE-2026-42016 JFrog Artifactory Incorrect Authorization Vulnerability

    Artifactory

    Due September 25, 2026

  3. Added September 2, 2026

    CVE-2026-82329 JFrog Artifactory Improper Authentication Vulnerability

    Artifactory

    Due September 5, 2026

  4. Added August 27, 2026

    CVE-2026-66384 JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability

    Artifactory

    Due September 10, 2026

Snapshot of CISA’s feed taken November 7, 2026; the whole catalog is counted on the KEV tracker.

On Daily CISO, newest first

  1. Weekly archive · Sep 14 – Sep 20, 2026

    ParaShells flaw in Parallels Desktop allows root escalation on Macs

Sources

  1. Cybersecurity and Infrastructure Security Agency, KEV catalog · primary source
  2. Cybersecurity and Infrastructure Security Agency, KEV JSON feed (catalog version 2026.11.06), published November 6, 2026 · primary source
  3. CISO Tribune, vendor directory record for JFrog, published November 8, 2026