CVE-2026-97712: high-severity vulnerability in Sonatype Nexus Repository 3
Nexus Repository 3 - Privilege Escalation via Role Management
Published
18Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.7
exploitation probability
—
observed exploitation
nono source reports it
Sonatype Nexus Repository 3 allows a user that holds the role create or role update permission to grant roles and privileges that the account does not hold. This can give the user more access than intended, up to full administrative access.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Sonatype · Nexus Repository 3Related CVEs — Sonatype Nexus Repository 3
In the same product, most dangerous first.
CVE-2026-17594HIGHNexus Repository 3 - Authorization Bypass in Repository CreationEPSS 0.7%CVE-2026-77124HIGHNexus Repository 3 - Script Execution Disable Setting Not EnforcedEPSS 0.7%CVE-2026-17603HIGHNexus Repository 3 - HikariCP connectionInitSql Injection RCE via DataStore Configuration APIEPSS 0.5%CVE-2026-77123MEDIUMNexus Repository 3 - Webhook Secret Disclosure via Capability Read APIEPSS 0.5%CVE-2026-14644HIGHNexus Repository 3 - Privilege EscalationEPSS 0.3%CVE-2026-17599MEDIUMNexus Repository 3 - Unverified Onboarding State on change-admin-password EndpointEPSS 0.3%