JFrog Artifactory 7.38.17 Actively exploited
Attackers are using a vulnerability in this version right now. Upgrade immediately.
Upgrade to 7.146.43
The lowest fixed release that is still supported.
- Known vulnerabilities
- 42 (3 critical, 15 high)
- End of life
- Yes, since 2023-11-08
- Data as of
- 2026-10-24 16:52 UTC
Vulnerabilities
- CVE-2026-82329 critical exploited fixed in 7.111.21
- CVE-2026-42016 high exploited fixed in 7.133.11
- CVE-2026-42018 high exploited fixed in 7.111.20
- CVE-2026-66384 medium exploited fixed in 7.146.35
- CVE-2024-6915 critical fixed in 7.55.18
- CVE-2024-4142 critical fixed in 7.55.17
- CVE-2026-69106 high fixed in 7.146.28
- CVE-2026-66014 high fixed in 7.111.18
- CVE-2026-65921 high fixed in 7.111.18
- CVE-2026-65617 high fixed in 7.111.18
And 32 more with lower severity.
- 8 JFrog Artifactory vulnerabilities are still under review and not included in this verdict.
Installed with apt, yum or another package manager? Your distribution may already have patched this without changing the version, so check its security tracker too.