[ // tag: #jfrog ] (2)

>12 SEPT 2026·7 min

Chained Artifactory Flaws Now Drop Rust Backdoors

Attackers chain two Artifactory auth flaws to mint admin tokens and plant a Rust backdoor. Wiz watched it happen between Aug 15 and Sep 8, 2026.

cybersecuritycvesupply-chain

>03 SEPT 2026·7 min

JFrog patches a CVSS 9.8 auth bypass letting attackers mint admin tokens. Exploited ~4 days after disclosure — here's what happened and the fix.

cybersecuritycvejfrog

>read more_

> booting the archive…