CVE-2026-14645

UNKNOWN 0.0

Nexus Repository 3 - Server-Side Request Forgery (SSRF) via Webhook: Global Capability

CVSS Score

0.0

EPSS Score

0.4%

EPSS Percentile

32th

Nexus Repository 3 does not validate the destination of the "Webhook: Global" capability's configured URL before making an outbound HTTP request, allowing a user holding the Capability Administration permission to cause the server to send requests to internal network locations (Server-Side Request Forgery). This permission is granted by role assignment, independent of authentication status, so an unauthenticated user could also trigger this behavior if the anonymous role has been granted the permission.

CWE	CWE-918
Vendor	sonatype
Product	nexus repository 3
Published	Jul 14, 2026
Last Updated	Jul 15, 2026

Stay Ahead of the Next One

Get instant alerts for sonatype nexus repository 3

Be the first to know when new unknown vulnerabilities affecting sonatype nexus repository 3 are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Sonatype / Nexus Repository 3

3.0.0 < 3.94.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

help.sonatype.com: https://help.sonatype.com/en/sonatype-nexus-repository-3-94-0-release-notes.html support.sonatype.com: https://support.sonatype.com/hc/en-us/articles/53158843564179/

Credits

Ky0toFu