https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T08:18:31.832645+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-265795 EUVD-2026-265795 2026-10-04T08:18:31.835787+00:00 EUVD-2026-265795 https://cve.radiocsirt.org/vuln/fkie_cve-2026-0600 fkie_cve-2026-0600 2026-10-04T08:18:31.835823+00:00

Server-Side Request Forgery (SSRF) vulnerability in Sonatype Nexus Repository 3 versions 3.0.0 and later allows authenticated administrators to configure proxy repositories with URLs that can access unintended network destinations, potentially including cloud metadata services and internal network resources. A workaround configuration is available starting in version 3.88.0, but the product remains vulnerable by default.

 https://cve.radiocsirt.org/vuln/ghsa-vr4x-w39v-5c7h GHSA-vr4x-w39v-5c7h 2026-10-04T08:18:31.835857+00:00

Server-Side Request Forgery (SSRF) vulnerability in Sonatype Nexus Repository 3 versions 3.0.0 and later allows authenticated administrators to configure proxy repositories with URLs that can access unintended network destinations, potentially including cloud metadata services and internal network resources. A workaround configuration is available starting in version 3.88.0, but the product remains vulnerable by default.

 https://cve.radiocsirt.org/vuln/jvndb-2026-000015 jvndb-2026-000015 2026-10-04T08:18:31.835875+00:00

Nexus Repository provided by Sonatype contains the following vulnerability.<ul><li>Server-side request forgery (CWE-918) - CVE-2026-0600</li></ul>Kazuma Matsumoto of GMO Cybersecurity by IERAE, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0094 WID-SEC-W-2026-0094 — Sonatype Nexus Repository Manager: Mehrere Schwachstellen 2026-10-04T08:18:31.835896+00:00

Ein Angreifer kann mehrere Schwachstellen in Sonatype Nexus Repository Manager ausnutzen, um Informationen offenzulegen oder einen Cross Site Scripting Angriff durchzuführen.