JFrog Artifactory CVE-2026-42018 anonymous token request (set xbit)

Ali AlEnezi@site

•updated 25 days ago•0•0•3

Detects an attempt to exploit CVE-2026-42018 in JFrog Artifactory, where an attacker bypasses authentication checks for the AWS token endpoint using a trailing-slash URL manipulation technique. This rule monitors for POST requests to the '/access/api/v1/aws/token/' endpoint.