CVE-2026-7494

Nexus Repository 3 is vulnerable to Server-Side Request Forgery (SSRF) via the SSL Certificate Retrieval endpoint. A user holding the nexus:ssl-truststore:read permission could cause the server to initiate outbound connections to internal or otherwise restricted network hosts. This issue affects Nexus Repository 3.0.0 through versions prior to 3.94.0.

Score

CVSS 4.0 5.3 Medium

Status

Analyzed - 103e4ec9-0a87-450b-af77-479448ddef11

Published

2026-07-14

Last modified

2026-10-24

Weaknesses

CWE-918

Affected products

• Nexus Repository Manager (Sonatype)

References

• https://help.sonatype.com/en/sonatype-nexus-repository-3-94-0-release-notes.html
• https://support.sonatype.com/hc/en-us/articles/53126069518227