JFrog Artifactory unauth anonymous token request (CVE-2026-42018)

Ali AlEnezi@site

•updated 25 days ago•0•0•9

Detects unauthorized attempts to request an AWS token via the JFrog Artifactory API, specifically targeting a vulnerability identified as CVE-2026-42018. The rule triggers when a POST request is made to the '/access/api/v1/aws/token/' endpoint without an Authorization header, indicating potential exploitation of an anonymous token request flaw.