$FROG

Landman Yoav (CHIEF TECHNOLOGY OFFICER) sold 45,000 shares of JFrog Ltd (FROG) at $97.27 ($4.38M total) on 2026-10-05 under a Rule 10b5-1 trading plan.

Simon Frederic sold 120,000 shares of JFrog Ltd (FROG) at an average of $97.24 ($96.37–$99.75, $11.67M total) across 5 trades on 2026-10-01 under a Rule 10b5-1 trading plan.

JFrog (FROG) reported Q2 revenue of $163.8M, up 28.7% YoY, beating estimates by 5.2%. Its stock rose 10.4% post-earnings. Fastly (FSLY) and GitLab (GTLB) also exceeded expectations, while Akamai (AKAM) and Dynatrace (DT) showed mixed results. Software development stocks averaged 14.1% gains since earnings.

CISA added vulnerabilities in GitLab, JFrog Artifactory, and ConnectWise ScreenConnect to its KEV catalog. GitLab's flaw (CVE-2026-85706, CVSS 10.0) allows file access; JFrog's flaws (CVE-2026-42016, CVSS 8.1; CVE-2026-42018, CVSS 7.5) enable privilege escalation; ConnectWise's flaw (CVE-2026-84869, CVSS 9.9) permits unauthorized file execution. Exploits have been observed. Federal agencies must patch by September 14, 2026, for GitLab and ConnectWise, and by September 25, 2026, for JFrog.

Attackers are exploiting three patched JFrog Artifactory vulnerabilities, including a critical authentication bypass (CVE-2026-82329). Wiz reports slow patching, with 49% of instances still vulnerable to the critical flaw two weeks after the fix. Experts urge treating artifact repositories with the same urgency as internet-facing systems to prevent supply chain attacks.

JFrog Ltd (FROG) launched Curation, a product to secure software supply chains amid a 451% YoY surge in malicious npm packages. DA Davidson reaffirmed a Buy rating with a $115 price target, citing long-term prospects. Curation could expand JFrog's role in software supply chain security, but faces competition and potential overpricing risks.

JFrog Artifactory instances are being targeted by attackers exploiting three vulnerabilities (CVE-2026-42018, CVE-2026-42016, CVE-2026-82329) despite patches being available. According to Wiz, 59% of organizations remain vulnerable to CVE-2026-42016, 62% to CVE-2026-42018, and 49% to CVE-2026-82329. Attackers are gaining admin access, installing backdoors, and exfiltrating data. JFrog has not commented on the attacks.

JFrog Ltd (FROG) faces security vulnerabilities in its Artifactory platform, raising concerns about its software supply chain solutions. The company's P/S ratio is 17.59x, above historical and industry norms, indicating potential overvaluation. Insiders have sold $391.8M in shares over the past year, while GF Value™ suggests a 68.2% overvaluation.

JFrog (FROG) was reaffirmed as a top software pick by TD Cowen after its customer conference, highlighting strong interest in security and governance solutions. The company beat Q2 earnings estimates with EPS of $0.27 and revenue of $163.77M, up 28.7% YoY. 22 analysts rate it Buy with a consensus price target of $107.14. JFrog introduced new security features and AI governance tools. Key clients reported increased usage and spending, driven by AI and security needs.

JFrog Artifactory faced cyberattacks exploiting chained vulnerabilities (CVE-2026-42018, CVE-2026-42016) between August 15 and September 8, 2026, allowing full admin access. Wiz reported attackers installed backdoors, created admin accounts, and executed shell commands. JFrog patched the vulnerabilities before attacks began. A third critical vulnerability (CVE-2026-82329) was also exploited, prompting CISA to issue a patch deadline for U.S. agencies.