Lucene search
+L

6 matches found

NVD
NVD
•added 2026/08/07 5:16 p.m.•34 views

CVE-2026-17593

An account holding the nexus:settings:update permission in Nexus Repository 3 or the equivalent nexus:settings permission in the legacy Nexus Repository 2 could submit arbitrary values as realm identifiers through an internal configuration API that did not validate them against the set of...

7.2CVSS0.00773EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/08/07 4:07 p.m.•25 views

CVE-2026-17593

An account holding the nexus:settings:update permission in Nexus Repository 3 or the equivalent nexus:settings permission in the legacy Nexus Repository 2 could submit arbitrary values as realm identifiers through an internal configuration API that did not validate them against the set of...

7.2CVSS6.1AI score0.00773EPSS
SaveExploits0References3Affected Software1
osv_cve
osv_cve
•added 2026/08/07 4:07 p.m.•10 views

CVE-2026-17593 Nexus Repository - Arbitrary Class Instantiation via Unsafe Realm Configuration

An account holding the nexus:settings:update permission in Nexus Repository 3 or the equivalent nexus:settings permission in the legacy Nexus Repository 2 could submit arbitrary values as realm identifiers through an internal configuration API that did not validate them against the set of...

7.2CVSS6.1AI score0.00773EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/08/07 4:07 p.m.•27 views

CVE-2026-17593 Nexus Repository - Arbitrary Class Instantiation via Unsafe Realm Configuration

An account holding the nexus:settings:update permission in Nexus Repository 3 or the equivalent nexus:settings permission in the legacy Nexus Repository 2 could submit arbitrary values as realm identifiers through an internal configuration API that did not validate them against the set of...

7.2CVSS6.1AI score0.00773EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/07 12:00 a.m.•12 views

CVE-2026-17593: Use of Externally-Controlled Input to Select Classes or Code

An account holding the nexus:settings:update permission in Nexus Repository 3 or the equivalent nexus:settings permission in the legacy Nexus Repository 2 could submit arbitrary values as realm identifiers through an internal configuration API that did not validate them against the set of...

7.2CVSS6.1AI score0.00773EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/07 12:00 a.m.•14 views

PT-2026-69055

Name of the Vulnerable Software and Affected Versions Nexus Repository 3 affected versions not specified Nexus Repository 2 affected versions not specified Description An account with the nexus:settings:update permission in Nexus Repository 3, or the nexus:settings permission in Nexus Repository ...

7.2CVSS6.3AI score0.00773EPSS
SaveExploits0References7
Rows per page
Query Builder