https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T12:57:49.524391+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-336630 EUVD-2026-336630 2026-10-04T12:57:49.526931+00:00 EUVD-2026-336630 https://cve.radiocsirt.org/vuln/fkie_cve-2026-7494 fkie_cve-2026-7494 2026-10-04T12:57:49.526970+00:00

Nexus Repository 3 is vulnerable to Server-Side Request Forgery (SSRF) via the SSL Certificate Retrieval endpoint. A user holding the nexus:ssl-truststore:read permission could cause the server to initiate outbound connections to internal or otherwise restricted network hosts. This issue affects Nexus Repository 3.0.0 through versions prior to 3.94.0.

 https://cve.radiocsirt.org/vuln/ghsa-jpvp-vqx9-22qg GHSA-jpvp-vqx9-22qg 2026-10-04T12:57:49.527003+00:00

Nexus Repository 3 is vulnerable to Server-Side Request Forgery (SSRF) via the SSL Certificate Retrieval endpoint. A user holding the nexus:ssl-truststore:read permission could cause the server to initiate outbound connections to internal or otherwise restricted network hosts. This issue affects Nexus Repository 3.0.0 through versions prior to 3.94.0.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2360 WID-SEC-W-2026-2360 — Sonatype Nexus Repository Manager: Mehrere Schwachstellen 2026-10-04T12:57:49.527021+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Sonatype Nexus Repository Manager ausnutzen, um Sicherheitsmaßnahmen zu umgehen, um Informationen offenzulegen und ggf. Daten zu manipulieren.