Wiz Research identified active in-the-wild exploitation of three critical vulnerabilities in JFrog Artifactory (CVE-2026-42016, CVE-2026-42018, CVE-2026-82329) that allow attackers to bypass authentication and gain administrative control. Attackers are chaining these flaws to deploy persistent backdoors and malicious plugins, with 49-62% of organizations remaining vulnerable weeks after disclosure.