CVE-2026-113374

A flaw was found in nexus. This vulnerability allows privilege escalation when an authenticated user with capability creation permissions enables the Rut Auth capability without requiring realm administration authorization. This action turns on header-based authentication for the instance, enabli...

CVE-2026-113374

Sonatype Nexus Repository 3 does not require realm administration permission when a user creates a Rut Auth capability. A user who holds only the capability creation permission nexus:capabilities:create can create this capability, which turns on header-based authentication for the instance. A...

EUVD-2026-117057

Sonatype Nexus Repository 3 does not require realm administration permission when a user creates a Rut Auth capability. A user who holds only the capability creation permission nexus:capabilities:create can create this capability, which turns on header-based authentication for the instance. A...

PT-2026-137116

Sonatype Nexus Repository 3 does not require realm administration permission when a user creates a Rut Auth capability. A user who holds only the capability creation permission nexus:capabilities:create can create this capability, which turns on header-based authentication for the instance. A...