CVE-2026-17593

An account holding the nexus:settings:update permission in Nexus Repository 3 or the equivalent nexus:settings permission in the legacy Nexus Repository 2 could submit arbitrary values as realm identifiers through an internal configuration API that did not validate them against the set of...

CVE-2026-17593: Use of Externally-Controlled Input to Select Classes or Code

An account holding the nexus:settings:update permission in Nexus Repository 3 or the equivalent nexus:settings permission in the legacy Nexus Repository 2 could submit arbitrary values as realm identifiers through an internal configuration API that did not validate them against the set of...

PT-2026-69055

Name of the Vulnerable Software and Affected Versions Nexus Repository 3 affected versions not specified Nexus Repository 2 affected versions not specified Description An account with the nexus:settings:update permission in Nexus Repository 3, or the nexus:settings permission in Nexus Repository ...