Wiz Reports Active Exploitation of Vulnerabilities in Self-Hosted JFrog Artifactory
Wiz researchers observed attacks chaining two vulnerabilities in self-hosted JFrog Artifactory to gain administrative access.
Tag Wiz
Critical JFrog Artifactory Flaw Shows Signs of Active Exploitation
CVE-2026-82329 in JFrog Artifactory could give an unauthenticated attacker administrator privileges under the default configuration. Patches are now available for self-managed deployments.
Wiz Recorded Attacks on LiteLLM and Other Publicly Accessible AI Services
Wiz honeypot telemetry showed persistent attempts to exploit AI and MCP services. Researchers also recorded attacks targeting two LiteLLM vulnerabilities for which fixes are available.