Bishop Fox @bishopfox.bsky.social · 23/09/2026A secret is only useful if it actually exists. Nate Robb and the Bishop Fox Threat Enablement & Analysis Team break down how an empty cluster join key led to unauthenticated admin access in default JFrog Artifactory installs and how to safely detect it. 100
Bishop Fox @bishopfox.bsky.social · 23/09/2026bfx.social/4AJlaYWbfx.socialCVE-2026-82329: Unauthenticated Administrative Access in JFrog...CVE-2026-82329 is a CVSS 9.8 JFrog Artifactory auth bypass where an empty cluster join key grants unauthenticated admin access. KEV-listed, patch now. 001