https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T11:55:22.519786+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-338035 EUVD-2026-338035 2026-10-04T11:55:22.565789+00:00 EUVD-2026-338035 https://cve.radiocsirt.org/vuln/fkie_cve-2026-14646 fkie_cve-2026-14646 2026-10-04T11:55:22.565824+00:00

Nexus Repository 3 did not apply its existing Server-Side Request Forgery (SSRF) protections to HTTP redirect targets returned by proxy repository upstream servers. Any user with read access to a proxy repository backed by an attacker-controlled or compromised upstream server — including an anonymous user, if anonymous access is enabled — could receive a response from an internal network address or cloud metadata endpoint as repository content, potentially exposing sensitive information such as cloud IAM credentials.

 https://cve.radiocsirt.org/vuln/ghsa-jxph-5989-pgpj GHSA-jxph-5989-pgpj 2026-10-04T11:55:22.565861+00:00

Nexus Repository 3 did not apply its existing Server-Side Request Forgery (SSRF) protections to HTTP redirect targets returned by proxy repository upstream servers. Any user with read access to a proxy repository backed by an attacker-controlled or compromised upstream server — including an anonymous user, if anonymous access is enabled — could receive a response from an internal network address or cloud metadata endpoint as repository content, potentially exposing sensitive information such as cloud IAM credentials.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2360 WID-SEC-W-2026-2360 — Sonatype Nexus Repository Manager: Mehrere Schwachstellen 2026-10-04T11:55:22.565882+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Sonatype Nexus Repository Manager ausnutzen, um Sicherheitsmaßnahmen zu umgehen, um Informationen offenzulegen und ggf. Daten zu manipulieren.