# JFrog in July 2026: incidents, uptime and changes

> JFrog in July 2026: 2 incidents on its status page (2 major or critical), 98.99% free of major or critical incidents (vendor-reported), 13 CVEs. From Rewindex’s archive of JFrog’s status, pricing and policy pages.

Canonical: https://rewindex.com/company/jfrog/2026/07
Last updated: 2026-10-24T13:10:00Z

- Incidents posted: 2 (major/critical: 2) · Maintenance: 9
- By vendor impact label: critical 2
- Uptime (vendor-reported): 98.99% free of major/critical incidents, 98.99% free of any incident; outage time 7 h 27 min, incident time 7 h 27 min
- Price changes: 0 · Pricing/legal/trust page changes: 0 · Deprecations: 0 · CVEs: 13
- Previous month: [June 2026](https://rewindex.com/company/jfrog/2026/06.md) · Next: [August 2026](https://rewindex.com/company/jfrog/2026/08.md) · [All months](https://rewindex.com/company/jfrog/reports.md) · [JFrog](https://rewindex.com/company/jfrog.md)

_Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._

## Major and critical incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Potential JFrog Xray Service Disruption Across All Regions](https://rewindex.com/company/jfrog/incidents/7swzdj8rq5x7.md) | critical | 2026-07-12 10:45 UTC | 2026-07-12 12:45 UTC | 2.0 h | resolved |
| [JFrog Cloud Platform outage affecting subset of customers in Azure US West region](https://rewindex.com/company/jfrog/incidents/n4x0rp3g80bk.md) | critical | 2026-07-23 15:04 UTC | 2026-07-23 20:32 UTC | 5.5 h | resolved |

## All incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Potential JFrog Xray Service Disruption Across All Regions](https://rewindex.com/company/jfrog/incidents/7swzdj8rq5x7.md) | critical | 2026-07-12 10:45 UTC | 2026-07-12 12:45 UTC | 2.0 h | resolved |
| [JFrog Cloud Platform outage affecting subset of customers in Azure US West region](https://rewindex.com/company/jfrog/incidents/n4x0rp3g80bk.md) | critical | 2026-07-23 15:04 UTC | 2026-07-23 20:32 UTC | 5.5 h | resolved |

## CVEs published

- [CVE-2026-42016](https://rewindex.com/cve/CVE-2026-42016.md) Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalation (CVSS 8.1, CISA KEV), published 2026-07-27
- [CVE-2026-42017](https://rewindex.com/cve/CVE-2026-42017.md) Privilege escalation via JFrog Worker event token exposure (CVSS 8.8), published 2026-07-27
- [CVE-2026-65921](https://rewindex.com/cve/CVE-2026-65921.md) Potential path traversal leading to unauthorized file writes (CVSS 8.8), published 2026-07-27
- [CVE-2026-66014](https://rewindex.com/cve/CVE-2026-66014.md) Potential authentication bypass leading to privilege escalation in Artifactory (CVSS 8.8), published 2026-07-27
- [CVE-2026-66018](https://rewindex.com/cve/CVE-2026-66018.md) JFrog Artifactory build environment properties exposure (CVSS 6.5), published 2026-07-27
- [CVE-2026-65618](https://rewindex.com/cve/CVE-2026-65618.md) Improper URL validation when handling specific URLs Pub, Terraform and Docker packages might lead to SSRF vulnerability (CVSS 6.5), published 2026-07-27
- [CVE-2026-66015](https://rewindex.com/cve/CVE-2026-66015.md) JFrog Platform contains an authorization flaw that may allow authenticated privilege escalation. (CVSS 7.2), published 2026-07-27
- [CVE-2026-65616](https://rewindex.com/cve/CVE-2026-65616.md) Potential privilege escalation to JFrog administrator privileges (CVSS 8.8), published 2026-07-27
- [CVE-2026-65925](https://rewindex.com/cve/CVE-2026-65925.md) Server-Side Request Forgery (SSRF) via JFrog Artifactory Cargo remote repository (CVSS 6.5), published 2026-07-27
- [CVE-2026-65924](https://rewindex.com/cve/CVE-2026-65924.md) Server-Side Request Forgery (SSRF) via Terraform Remote repository (CVSS 6.5), published 2026-07-27
- [CVE-2026-65617](https://rewindex.com/cve/CVE-2026-65617.md) Potential remote code execution on an Artifactory package service container. (CVSS 8.8), published 2026-07-27
- [CVE-2026-65923](https://rewindex.com/cve/CVE-2026-65923.md) Potential server-side request forgery in Artifactory Ansible repository handling (CVSS 6.8), published 2026-07-27
- [CVE-2026-65922](https://rewindex.com/cve/CVE-2026-65922.md) Potential unauthorized modification of Artifactory internal metadata (CVSS 7.1), published 2026-07-27

## Maintenance

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [\[Scheduled\] Planned Cloud Maintenance on Azure North Central US](https://rewindex.com/company/jfrog/incidents/p5zjk63800n9.md) | maintenance | 2026-07-05 07:00 UTC | 2026-07-05 08:00 UTC | 1.0 h | resolved |
| [\[Scheduled\] Critical JFrog Cloud Platform Database Maintenance on AWS US West2](https://rewindex.com/company/jfrog/incidents/dm5c66ql1cks.md) | maintenance | 2026-07-05 09:00 UTC | 2026-07-05 10:00 UTC | 1.0 h | resolved |
| [\[Scheduled\] JFrog Cloud Platform database maintenance on selected Azure regions](https://rewindex.com/company/jfrog/incidents/hhq7c13cz7dw.md) | maintenance | 2026-07-05 09:15 UTC | 2026-07-05 12:15 UTC | 3.0 h | resolved |
| [\[Scheduled\] Critical JFrog Cloud Platform Database Maintenance on GCP US](https://rewindex.com/company/jfrog/incidents/fs8khqhlhw9h.md) | maintenance | 2026-07-09 21:38 UTC | 2026-07-09 21:53 UTC | 15 min | resolved |
| [\[Scheduled\] JFrog Cloud Application maintenance on AWS APAC SouthEast1](https://rewindex.com/company/jfrog/incidents/y5syp6rn3qhk.md) | maintenance | 2026-07-16 12:00 UTC | 2026-07-16 13:00 UTC | 1.0 h | resolved |
| [\[Scheduled\] Planned Cloud Maintenance on Azure West US](https://rewindex.com/company/jfrog/incidents/j1q96s1223f1.md) | maintenance | 2026-07-19 07:00 UTC | 2026-07-19 08:01 UTC | 1.0 h | resolved |
| [\[Scheduled\] Planned Cloud Maintenance on Azure South Central US](https://rewindex.com/company/jfrog/incidents/msw3xll1xsq0.md) | maintenance | 2026-07-19 07:01 UTC | 2026-07-19 08:00 UTC | 59 min | resolved |
| [\[Scheduled\] JFrog Cloud Platform Database Maintenance on AWS EU-West1](https://rewindex.com/company/jfrog/incidents/p3n6c2g4f9y4.md) | maintenance | 2026-07-20 21:15 UTC | 2026-07-20 21:30 UTC | 15 min | resolved |
| [\[Scheduled\] JFrog Cloud Platform database maintenance on AWS Europe - West1](https://rewindex.com/company/jfrog/incidents/5bv7kk8d9bgf.md) | maintenance | 2026-07-26 12:15 UTC | 2026-07-26 13:15 UTC | 1.0 h | resolved |

## Cite this

JFrog posted 2 status incidents in July 2026 (2 major or critical); 0 price changes and 0 notable page changes observed.

- Canonical URL: https://rewindex.com/company/jfrog/2026/07
- Citation: JFrog, “JFrog in July 2026” (2026-07-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/jfrog/2026/07 (CC BY 4.0).
- Markdown link: `[JFrog: JFrog in July 2026 (2026-07-01)](https://rewindex.com/company/jfrog/2026/07)`


---
Canonical: https://rewindex.com/company/jfrog/2026/07 · Markdown: https://rewindex.com/company/jfrog/2026/07.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-05T14:10:19.107Z