https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 08:18:06 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-265795 EUVD-2026-265795 https://cve.radiocsirt.org/vuln/euvd-2026-265795 https://cve.radiocsirt.org/vuln/fkie_cve-2026-0600 <p>Server-Side Request Forgery (SSRF) vulnerability in Sonatype Nexus Repository 3 versions 3.0.0 and later allows authenticated administrators to configure proxy repositories with URLs that can access unintended network destinations, potentially including cloud metadata services and internal network resources. A workaround configuration is available starting in version 3.88.0, but the product remains vulnerable by default.</p> <p>Server-Side Request Forgery (SSRF) vulnerability in Sonatype Nexus Repository 3 versions 3.0.0 and later allows authenticated administrators to configure proxy repositories with URLs that can access unintended network destinations, potentially including cloud metadata services and internal network resources. A workaround configuration is available starting in version 3.88.0, but the product remains vulnerable by default.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-0600 https://cve.radiocsirt.org/vuln/ghsa-vr4x-w39v-5c7h <p>Server-Side Request Forgery (SSRF) vulnerability in Sonatype Nexus Repository 3 versions 3.0.0 and later allows authenticated administrators to configure proxy repositories with URLs that can access unintended network destinations, potentially including cloud metadata services and internal network resources. A workaround configuration is available starting in version 3.88.0, but the product remains vulnerable by default.</p> <p>Server-Side Request Forgery (SSRF) vulnerability in Sonatype Nexus Repository 3 versions 3.0.0 and later allows authenticated administrators to configure proxy repositories with URLs that can access unintended network destinations, potentially including cloud metadata services and internal network resources. A workaround configuration is available starting in version 3.88.0, but the product remains vulnerable by default.</p> https://cve.radiocsirt.org/vuln/ghsa-vr4x-w39v-5c7h https://cve.radiocsirt.org/vuln/jvndb-2026-000015 <p>Nexus Repository provided by Sonatype contains the following vulnerability.&lt;ul&gt;&lt;li&gt;Server-side request forgery (CWE-918) - CVE-2026-0600&lt;/li&gt;&lt;/ul&gt;Kazuma Matsumoto of GMO Cybersecurity by IERAE, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>Nexus Repository provided by Sonatype contains the following vulnerability.&lt;ul&gt;&lt;li&gt;Server-side request forgery (CWE-918) - CVE-2026-0600&lt;/li&gt;&lt;/ul&gt;Kazuma Matsumoto of GMO Cybersecurity by IERAE, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2026-000015 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0094 <p>Ein Angreifer kann mehrere Schwachstellen in Sonatype Nexus Repository Manager ausnutzen, um Informationen offenzulegen oder einen Cross Site Scripting Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Sonatype Nexus Repository Manager ausnutzen, um Informationen offenzulegen oder einen Cross Site Scripting Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0094