CVE-2026-17597 Nexus Repository 3 - Server-Side Request Forgery via Email Configuration Verification

Nexus Repository 3 contains a Server-Side Request Forgery SSRF vulnerability in the email configuration verification feature. A user holding the nexus:settings:update permission could submit arbitrary host and port values to the email test/verification endpoint, causing the server to attempt...

PT-2026-69059

Name of the Vulnerable Software and Affected Versions Nexus Repository 3 versions prior to 3.95.0 Description A Server-Side Request Forgery SSRF issue exists in the email configuration verification feature. A user with the nexus:settings:update permission can submit arbitrary host and port values...

CVE-2026-17597: Server-Side Request Forgery (SSRF)

Nexus Repository 3 contains a Server-Side Request Forgery SSRF vulnerability in the email configuration verification feature. A user holding the nexus:settings:update permission could submit arbitrary host and port values to the email test/verification endpoint, causing the server to attempt...