Skip to content
OpenAdvisories
High WID-SEC-2026-4004 4 CVEs

Sonatype Nexus Repository Manager: Mehrere Schwachstellen

Published Oct 15, 2026 · Updated Oct 15, 2026 · de-DE

Vendor: Sonatype Product: Nexus Repository Manager Platform: Linux Platform: macOS Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Sonatype Nexus Repository Manager ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen, beliebigen Programmcode auszuführen oder Administratorrechte zu erlangen, sowie um einen Cross-Site Scripting Angriff durchzuführen.

Product

Sonatype Nexus Repository Manager ist ein Verwaltungstool für Software-Bestandteile.

Vulnerabilities 4

  • High 8.7
    CVE-2026-97712

    Nexus Repository 3 - Privilege Escalation via Role Management

    Sonatype Nexus Repository 3 allows a user that holds the role create or role update permission to grant roles and privileges that the account does not hold. This can give the user more access than intended, up to full administrative access.

    Sonatype Nexus Repository 3
  • High 7.1
    CVE-2026-97665

    Nexus Repository 3 - Missing Authorization on NuGet Symbol Package Upload

    A missing authorization check in Nexus Repository 3's NuGet Components API upload path allows an account holding only repository read and browse privileges to upload and persist NuGet symbol packages (.snupkg) to a hosted repository, bypassing the write-permi…

    Sonatype Nexus Repository 3
  • Medium 6.9
    CVE-2026-97666

    Nexus Repository 3 - Unsafe Reflection in ExtDirect Repository Endpoint

    Sonatype Nexus Repository 3 allows an unauthenticated remote attacker to supply attacker-controlled input to a Java class loading call through an ExtDirect endpoint. This allows the attacker to learn whether specific classes are present in the application. Th…

    Sonatype Nexus Repository 3
  • Medium 5.1
    CVE-2026-97667

    Nexus Repository 3 - Stored Cross-Site Scripting in Browse UI

    Sonatype Nexus Repository 3 allows a user account that holds the edit permission on a hosted R repository to store script content in the metadata of an uploaded R package. The script runs in the browser of a user who opens the details of that package in the B…

    Sonatype Nexus Repository 3

Revision history

  1. #1

    Initiale Fassung

References