https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T11:05:28.733347+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-349429 EUVD-2026-349429 2026-10-04T11:05:28.787530+00:00 EUVD-2026-349429 https://cve.radiocsirt.org/vuln/fkie_cve-2026-17594 fkie_cve-2026-17594 2026-10-04T11:05:28.787574+00:00

Nexus Repository 3 CE/Pro versions 3.0.0 through 3.94.x contain an incorrect authorization vulnerability (CWE-863) in the repository-creation user interface. An individual user account holding a delegated repository-admin privilege scoped to a specific repository format could create a repository of a different, unauthorized format, because authorization was checked against one request field while a separate, attacker-controlled field determined the repository format actually created. This does not affect the anonymous user, which cannot hold this privilege by default. Fixed in version 3.95.0.

 https://cve.radiocsirt.org/vuln/ghsa-9x3v-rxwx-3gx2 GHSA-9x3v-rxwx-3gx2 2026-10-04T11:05:28.787612+00:00

Nexus Repository 3 CE/Pro versions 3.0.0 through 3.94.x contain an incorrect authorization vulnerability (CWE-863) in the repository-creation user interface. An individual user account holding a delegated repository-admin privilege scoped to a specific repository format could create a repository of a different, unauthorized format, because authorization was checked against one request field while a separate, attacker-controlled field determined the repository format actually created. This does not affect the anonymous user, which cannot hold this privilege by default. Fixed in version 3.95.0.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2713 WID-SEC-W-2026-2713 — Sonatype Nexus Repository Manager: Mehrere Schwachstellen 2026-10-04T11:05:28.787632+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Sonatype Nexus Repository Manager ausnutzen, um Daten offenzulegen oder zu Manipulieren, Code auszuführen oder Rechte zu erweitern.