CVE-2026-14644

Nexus Repository 3 contains a privilege escalation vulnerability in the REST privileges API. An authenticated user who can manage privileges can elevate to full administrator under certain role configurations by abusing a type-confusion flaw in the privilege update endpoint. The CVE entry describ...