CVE-2026-97665: fallo de gravedad alta en Sonatype Nexus Repository 3
Nexus Repository 3 - Missing Authorization on NuGet Symbol Package Upload
Publicada el
18Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 7.1
probabilidad de explotación
—
explotación observada
noninguna fuente lo reporta
A missing authorization check in Nexus Repository 3's NuGet Components API upload path allows an account holding only repository read and browse privileges to upload and persist NuGet symbol packages (.snupkg) to a hosted repository, bypassing the write-permission check enforced for ordinary package uploads. Exploitation requires a hosted NuGet repository with Symbol Server enabled. If anonymous access is enabled, the built-in anonymous user holds read and browse privileges across all repositories by default, so this precondition can also be met without an authenticated account.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
Productos afectados
Sonatype · Nexus Repository 3CVEs relacionadas — Sonatype Nexus Repository 3
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-17594HIGHNexus Repository 3 - Authorization Bypass in Repository CreationEPSS 0.7%CVE-2026-77124HIGHNexus Repository 3 - Script Execution Disable Setting Not EnforcedEPSS 0.7%CVE-2026-17603HIGHNexus Repository 3 - HikariCP connectionInitSql Injection RCE via DataStore Configuration APIEPSS 0.5%CVE-2026-77123MEDIUMNexus Repository 3 - Webhook Secret Disclosure via Capability Read APIEPSS 0.5%CVE-2026-14644HIGHNexus Repository 3 - Privilege EscalationEPSS 0.3%CVE-2026-17599MEDIUMNexus Repository 3 - Unverified Onboarding State on change-admin-password EndpointEPSS 0.3%