CVE-2026-97666: medium-severity vulnerability in Sonatype Nexus Repository 3
Nexus Repository 3 - Unsafe Reflection in ExtDirect Repository Endpoint
Published
10Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.9
exploitation probability
—
observed exploitation
nono source reports it
Sonatype Nexus Repository 3 allows an unauthenticated remote attacker to supply attacker-controlled input to a Java class loading call through an ExtDirect endpoint. This allows the attacker to learn whether specific classes are present in the application. The issue does not by itself allow code execution.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Affected products
Sonatype · Nexus Repository 3Related CVEs — Sonatype Nexus Repository 3
In the same product, most dangerous first.
CVE-2026-17594HIGHNexus Repository 3 - Authorization Bypass in Repository CreationEPSS 0.7%CVE-2026-77124HIGHNexus Repository 3 - Script Execution Disable Setting Not EnforcedEPSS 0.7%CVE-2026-17603HIGHNexus Repository 3 - HikariCP connectionInitSql Injection RCE via DataStore Configuration APIEPSS 0.5%CVE-2026-77123MEDIUMNexus Repository 3 - Webhook Secret Disclosure via Capability Read APIEPSS 0.5%CVE-2026-14644HIGHNexus Repository 3 - Privilege EscalationEPSS 0.3%CVE-2026-17599MEDIUMNexus Repository 3 - Unverified Onboarding State on change-admin-password EndpointEPSS 0.3%