Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
11 IOCs
Hackers Exploit JFrog Artifactory Flaws to Bypass Authentication and Gain Admin Access
Excerpt
Threat actors are actively exploiting three vulnerabilities in JFrog Artifactory : CVE-2026-42016, CVE-2026-42018, and CVE-2026-82329 to bypass authentication, escalate privileges, and seize administrative control of exposed instances. The attacks pose a significant supply-chain risk because Artifactory commonly stores proprietary software packages, build artifacts, access tokens, repository credentials, and integrations used across development environments. Attackers with…
Read the original report →Diamond Model
Adversary
Infrastructure(6)
Capability
Victim
Indicators of Compromise
Open the mindmap →11 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| URL | http://log.gitclone.org:45678/smtp | High | Score 58/100 | First seen |
| IP | 220.246.124.92 | High | Score 58/100 | First seen |
| SHA1 | 513a907b69edffc3cb77a494da395178d21ef9bd | Medium | Score 53/100 | First seen |
| URL | http://3.88.162.79:36789/smtp | High | Score 58/100 | First seen |
| CVE | CVE-2026-42016 | High | Score 61/100 | First seen |
| IP | 64.207.232.6 | High | Score 58/100 | First seen |
| IP | 146.19.216.120 | High | Score 83/100 | First seen |
| CVE | CVE-2026-42018 | High | Score 61/100 | First seen |
| IP | 93.104.155.133 | High | Score 58/100 | First seen |
| CVE | CVE-2026-4201 | Medium | Score 54/100 | First seen |
| CVE | CVE-2026-82329 | High | Score 67/100 | First seen |
IOC Relationship Graph
Building graph…