JFrog Artifactory ↗

JFrog · Developer Tools

Track your version:Monitors JFrog Artifactory and tailors your dashboard to that exact version.

7.161.26 · latest cycle100/100 Healthy

Summary iPlain-English security verdict for JFrog Artifactory, generated from its current health score, actively-exploited vulnerabilities, and latest supported version.

JFrog Artifactory currently scores 100/100 — healthy. 4 actively-exploited vulnerabilities (CISA KEV) affect older releases (e.g. CVE-2026-82329) — staying on the latest supported version keeps you clear of them. The latest supported release is 7.161.26. It's on the latest patch with no significant known issues — keep it current.

Disclosure trend iNew CVEs published for JFrog Artifactory each year (NVD). A higher bar means more disclosures that year — more scrutiny, not necessarily less safe.

'19

'20

'21

'22

'23

'24

'25

'26

Patch priority — what to act on iThe issues to fix first — actively exploited (CISA KEV) first, then by exploitation probability (EPSS), then severity. Each row's "→ fixed in" is the earliest version that patches it; "see advisory" means no fixed version is published.

Most urgent first — actively exploited, then likeliest to be exploited.

CVE-2026-82329 CRITICAL exploited Improper authentication EPSS 8% → fixed in 7.161.20 CVE-2026-42018 HIGH exploited Improper authentication EPSS 1% → fixed in 7.146.8 CVE-2026-42016 HIGH exploited Incorrect authorization EPSS 1% → fixed in 7.133.11 CVE-2026-66384 MEDIUM exploited Path traversal EPSS 0% → fixed in 7.161.16 CVE-2019-17444 CRITICAL CWE-521 EPSS 69% → fixed in 6.17.0 CVE-2019-9733 CRITICAL EPSS 54% → see advisory CVE-2016-10036 CRITICAL Unrestricted file upload EPSS 26% → fixed in 4.16 CVE-2016-6501 CRITICAL Improper input validation EPSS 4% → see advisory CVE-2018-19971 CRITICAL CWE-345 EPSS 3% → see advisory CVE-2023-42662 CRITICAL Improper authentication EPSS 0% → fixed in 7.71.8

See all 70 known JFrog Artifactory CVEs & security history →

Get alerted about JFrog Artifactory

Be emailed the moment JFrog Artifactory gets a newly exploited vulnerability (CISA KEV) or a release reaches end of life. Free · double opt-in · unsubscribe anytime.

We email only on real events for JFrog Artifactory — no marketing, no sharing, and we never know what you run. Track your whole stack →

Versions & lifecycle iWhen each release line stops receiving security patches (end-of-life). After EOL there are no more fixes — plan upgrades before these dates.

How long each JFrog Artifactory release line is supported — and when it sunsets. Select a line for its full report.

Jan27'28 JFrog Artifactory 7.161EOL 2028-01-27

Oct16'27 JFrog Artifactory 7.146EOL 2027-10-16

Apr30'27 JFrog Artifactory 7.133EOL 2027-04-30

Apr30'27 JFrog Artifactory 7.125EOL 2027-04-30

Jan14'27 JFrog Artifactory 7.117EOL 2027-01-14

Oct23'26 JFrog Artifactory 7.111EOL 2026-10-23

Jul30'26 JFrog Artifactory 7.104ended 2026-07-30

Apr29'26 JFrog Artifactory 7.98ended 2026-04-29

Jan25'26 JFrog Artifactory 7.90ended 2026-01-25

Nov12'25 JFrog Artifactory 7.84ended 2025-11-12

Jul24'25 JFrog Artifactory 7.77ended 2025-07-24

Mar24'25 JFrog Artifactory 7.71ended 2025-03-24

Full JFrog Artifactory end-of-life dates & support timeline →

7.161 latest 7.161.26 Supported until 2028-01-277.161.26 → 7.146 latest 7.146.39 Supported until 2027-10-167.146.39 → 7.133 latest 7.133.30 Supported until 2027-04-307.133.30 → 7.125 latest 7.125.21 Supported until 2027-04-307.125.21 → 7.117 latest 7.117.29 Supported until 2027-01-147.117.29 → 7.111 latest 7.111.22 Supported until 2026-10-237.111.22 → 7.104 latest 7.104.17 End of life ended 2026-07-307.104.17 → 7.98 latest 7.98.19 End of life ended 2026-04-297.98.19 → 7.90 latest 7.90.19 End of life ended 2026-01-257.90.19 → 7.84 latest 7.84.23 End of life ended 2025-11-127.84.23 → See all upcoming end-of-life dates →

Frequently asked

Is JFrog Artifactory safe and patched?

What should I do about JFrog Artifactory now?

Upgrade JFrog Artifactory to the latest supported release (7.161.26) or later, which clears the actively-exploited issues affecting older versions, then confirm against JFrog's official advisory.

When does JFrog Artifactory reach end-of-life?

The latest supported JFrog Artifactory release is 7.161.26. After end-of-life a release no longer receives security patches.

Which versions of JFrog Artifactory are still receiving security updates?

Supported JFrog Artifactory release lines (latest 7.161.26): 7.161, 7.146, 7.133, 7.125, 7.117, 7.111. End-of-life releases no longer receive security patches.

Latest security news for JFrog Artifactory BETA

Attributed third-party reporting linked to JFrog Artifactory — newest first. We surface and link the source; we don’t assert our own findings. About Emerging →

Exploited More JFrog Artifactory bugs under attack, and all 3 have patchesThe Register · 11 Sept 2026 · medium confidence Reported Attackers Chain JFrog Artifactory Flaws to Gain Admin Control and Plant BackdoorsThe Hacker News · 11 Sept 2026 · medium confidence

More across all tracked software on the Emerging feed →

Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against JFrog's official advisory before you patch or upgrade — JFrog Artifactory official site ↗