$FROG

CISA added vulnerabilities in GitLab, JFrog Artifactory, and ConnectWise ScreenConnect to its KEV catalog. GitLab's flaw (CVE-2026-85706, CVSS 10.0) allows file access; JFrog's flaws (CVE-2026-42016, CVSS 8.1; CVE-2026-42018, CVSS 7.5) enable privilege escalation; ConnectWise's flaw (CVE-2026-84869, CVSS 9.9) permits unauthorized file execution. Exploits have been observed. Federal agencies must patch by September 14, 2026, for GitLab and ConnectWise, and by September 25, 2026, for JFrog.

Attackers are exploiting three patched JFrog Artifactory vulnerabilities, including a critical authentication bypass (CVE-2026-82329). Wiz reports slow patching, with 49% of instances still vulnerable to the critical flaw two weeks after the fix. Experts urge treating artifact repositories with the same urgency as internet-facing systems to prevent supply chain attacks.

JFrog Ltd (FROG) launched Curation, a product to secure software supply chains amid a 451% YoY surge in malicious npm packages. DA Davidson reaffirmed a Buy rating with a $115 price target, citing long-term prospects. Curation could expand JFrog's role in software supply chain security, but faces competition and potential overpricing risks.

JFrog Artifactory instances are being targeted by attackers exploiting three vulnerabilities (CVE-2026-42018, CVE-2026-42016, CVE-2026-82329) despite patches being available. According to Wiz, 59% of organizations remain vulnerable to CVE-2026-42016, 62% to CVE-2026-42018, and 49% to CVE-2026-82329. Attackers are gaining admin access, installing backdoors, and exfiltrating data. JFrog has not commented on the attacks.

JFrog Ltd (FROG) faces security vulnerabilities in its Artifactory platform, raising concerns about its software supply chain solutions. The company's P/S ratio is 17.59x, above historical and industry norms, indicating potential overvaluation. Insiders have sold $391.8M in shares over the past year, while GF Value™ suggests a 68.2% overvaluation.

JFrog (FROG) was reaffirmed as a top software pick by TD Cowen after its customer conference, highlighting strong interest in security and governance solutions. The company beat Q2 earnings estimates with EPS of $0.27 and revenue of $163.77M, up 28.7% YoY. 22 analysts rate it Buy with a consensus price target of $107.14. JFrog introduced new security features and AI governance tools. Key clients reported increased usage and spending, driven by AI and security needs.

JFrog Artifactory faced cyberattacks exploiting chained vulnerabilities (CVE-2026-42018, CVE-2026-42016) between August 15 and September 8, 2026, allowing full admin access. Wiz reported attackers installed backdoors, created admin accounts, and executed shell commands. JFrog patched the vulnerabilities before attacks began. A third critical vulnerability (CVE-2026-82329) was also exploited, prompting CISA to issue a patch deadline for U.S. agencies.

JFrog's CEO sold 45,700 shares on September 8, 2026, under a pre-arranged Rule 10b5-1 plan, with prices ranging from $81.80 to $88.37 per share. The sales totaled approximately $3.90 million. The CEO now holds 4,449,305 shares directly.

Shlomi Ben Haim (CHIEF EXECUTIVE OFFICER) sold 45,700 shares of JFrog Ltd (FROG) at an average of $85.35 ($82.17–$88.23, $3.90M total) across 7 trades on 2026-09-08 under a Rule 10b5-1 trading plan.

Notman Tali (CHIEF REVENUE OFFICER) sold 18,794 shares of JFrog Ltd (FROG) at an average of $86.98 ($86.94–$87.78, $1.63M total) across 2 trades on 2026-09-08 under a Rule 10b5-1 trading plan.