CVE-2026-97665

A missing authorization check in Nexus Repository 3's NuGet Components API upload path allows an account holding only repository read and browse privileges to upload and persist NuGet symbol packages .snupkg to a hosted repository, bypassing the write-permission check enforced for ordinary packag...

CVE-2026-97665

A missing authorization check in Nexus Repository 3 's NuGet Components API upload path allows users with only read and browse privileges to upload and persist NuGet symbol packages (.snupkg) to a hosted repository. This bypasses the standard write-permission checks for ordinary package uploads. ...

CVE-2026-97665 Nexus Repository 3 - Missing Authorization on NuGet Symbol Package Upload

A missing authorization check in Nexus Repository 3's NuGet Components API upload path allows an account holding only repository read and browse privileges to upload and persist NuGet symbol packages .snupkg to a hosted repository, bypassing the write-permission check enforced for ordinary packag...

EUVD-2026-102152

A missing authorization check in Nexus Repository 3's NuGet Components API upload path allows an account holding only repository read and browse privileges to upload and persist NuGet symbol packages .snupkg to a hosted repository, bypassing the write-permission check enforced for ordinary packag...