Skip to content
OpenAdvisories
Medium WID-SEC-2026-2360 5 CVEs

Sonatype Nexus Repository Manager: Mehrere Schwachstellen

Published Jul 14, 2026 · Updated Jul 14, 2026 · de-DE

Vendor: Sonatype Product: Nexus Repository Manager Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Sonatype Nexus Repository Manager ausnutzen, um Sicherheitsmaßnahmen zu umgehen, um Informationen offenzulegen und ggf. Daten zu manipulieren.

Product

Sonatype Nexus Repository Manager ist ein Verwaltungstool für Software-Bestandteile.

Vulnerabilities 5

  • High 8.7
    CVE-2026-11403

    Nexus Repository Manager - Insufficient Entropy in Format-Specific API Key Generation

    A vulnerability in Sonatype Nexus Repository Manager's format-specific API key generation may allow a remote attacker to gain unauthorized access to repository operations as a targeted user. A format-specific API key realm (NuGet API Key, Docker Bearer Token,…

    Sonatype Nexus Repository Manager
  • High 8.2
    CVE-2026-14504

    Nexus Repository 3 - Authorization Bypass in Component Upload API

    An authorization bypass in Nexus Repository 3's component upload API allowed a user with only read/browse privileges on a Swift, Terraform, or Conda hosted repository to upload arbitrary artifacts, bypassing the intended write-permission check.

    Sonatype Nexus Repository 3
  • Medium 5.3
    CVE-2026-7494

    Nexus Repository - SSRF in SSL Certificate Retrieval

    Nexus Repository 3 is vulnerable to Server-Side Request Forgery (SSRF) via the SSL Certificate Retrieval endpoint. A user holding the nexus:ssl-truststore:read permission could cause the server to initiate outbound connections to internal or otherwise restric…

    Sonatype Nexus Repository
  • Medium 5.1
    CVE-2026-14645

    Nexus Repository 3 - Server-Side Request Forgery (SSRF) via Webhook: Global Capability

    Nexus Repository 3 does not validate the destination of the "Webhook: Global" capability's configured URL before making an outbound HTTP request, allowing a user holding the Capability Administration permission to cause the server to send requests to internal…

    Sonatype Nexus Repository 3
  • Medium 4.9
    CVE-2026-14646

    Nexus Repository 3 - Server-Side Request Forgery (SSRF) via HTTP Redirect

    Nexus Repository 3 did not apply its existing Server-Side Request Forgery (SSRF) protections to HTTP redirect targets returned by proxy repository upstream servers. Any user with read access to a proxy repository backed by an attacker-controlled or compromise…

    Sonatype Nexus Repository 3

Revision history

  1. #1

    Initiale Fassung

References