CVE Catalog
CVE-2026-42018
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk0.30%
22th percentile - higher than 22% of all known CVEs
Summary
JFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources.
Risk Assessment
Risk of exposing sensitive resources to unauthorized parties, potentially leading to data confidentiality breaches.
Recommendation
Apply vendor patches and ensure anonymous access is properly configured and blocked.
Original NVD description (English source)
JFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources.