CompaniesJFrogMonthly reportsJuly 2026
JFrog in July 2026: incidents, uptime and changes
2incidents posted
2labelled major or critical
98.99%free of major/critical
98.99%free of any incident
0price changes
0notable page changes
Vendor-reported outage time 7 h 27 min, incident time 7 h 27 min. Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours. Last 90 days.
By vendor label: Critical 2
Major and critical incidents 2
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Potential JFrog Xray Service Disruption Across All Regions | Critical | 2.0 h | resolved | 07-12 | |
| JFrog Cloud Platform outage affecting subset of customers in Azure US West region | Critical | 5.5 h | resolved | 07-23 |
CVEs published
- CVE-2026-42016 Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalation (CVSS 8.1, CISA KEV)
- CVE-2026-42017 Privilege escalation via JFrog Worker event token exposure (CVSS 8.8)
- CVE-2026-65921 Potential path traversal leading to unauthorized file writes (CVSS 8.8)
- CVE-2026-66014 Potential authentication bypass leading to privilege escalation in Artifactory (CVSS 8.8)
- CVE-2026-66018 JFrog Artifactory build environment properties exposure (CVSS 6.5)
- CVE-2026-65618 Improper URL validation when handling specific URLs Pub, Terraform and Docker packages might lead to SSRF vulnerability (CVSS 6.5)
- CVE-2026-66015 JFrog Platform contains an authorization flaw that may allow authenticated privilege escalation. (CVSS 7.2)
- CVE-2026-65616 Potential privilege escalation to JFrog administrator privileges (CVSS 8.8)
- CVE-2026-65925 Server-Side Request Forgery (SSRF) via JFrog Artifactory Cargo remote repository (CVSS 6.5)
- CVE-2026-65924 Server-Side Request Forgery (SSRF) via Terraform Remote repository (CVSS 6.5)
- CVE-2026-65617 Potential remote code execution on an Artifactory package service container. (CVSS 8.8)
- CVE-2026-65923 Potential server-side request forgery in Artifactory Ansible repository handling (CVSS 6.8)
- CVE-2026-65922 Potential unauthorized modification of Artifactory internal metadata (CVSS 7.1)
Maintenance 9
Show scheduled maintenance
- [Scheduled] Planned Cloud Maintenance on Azure North Central US
- [Scheduled] Critical JFrog Cloud Platform Database Maintenance on AWS US West2
- [Scheduled] JFrog Cloud Platform database maintenance on selected Azure regions
- [Scheduled] Critical JFrog Cloud Platform Database Maintenance on GCP US
- [Scheduled] JFrog Cloud Application maintenance on AWS APAC SouthEast1
- [Scheduled] Planned Cloud Maintenance on Azure West US
- [Scheduled] Planned Cloud Maintenance on Azure South Central US
- [Scheduled] JFrog Cloud Platform Database Maintenance on AWS EU-West1
- [Scheduled] JFrog Cloud Platform database maintenance on AWS Europe - West1
Cite this
JFrog posted 2 status incidents in July 2026 (2 major or critical); 0 price changes and 0 notable page changes observed.
- Title
- JFrog in July 2026
- Vendor
- JFrog
- Date
- URL
- https://rewindex.com/company/jfrog/2026/07