CVE-2026-7494CWE-918ssrf

CVE-2026-7494

Medium · published July 14, 2026

CVSS v3.1
5.0
EPSS
0%
Percentile
6.2
In the wild
Unconfirmed
What it is

Nexus Repository 3 is vulnerable to Server-Side Request Forgery (SSRF) via the SSL Certificate Retrieval endpoint. A user holding the nexus:ssl-truststore:read permission could cause the server to initiate outbound connections to internal or otherwise restricted network hosts. This issue affects Nexus Repository 3.0.0 through versions prior to 3.94.0.

The record
Technical detail
CVSS v3.1
5.0 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00172 · 6.2th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2026-07-14T20:17Z
Affected products (1)
ProductVersionsFixed in
sonatype/nexus_repository_manager≥ 3.0.0, < 3.94.03.94.0
References (2)
https://help.sonatype.com/en/sonatype-nexus-repository-3-94-0-release-notes.html · 103e4ec9-0a87-450b-af77-479448ddef11https://support.sonatype.com/hc/en-us/articles/53126069518227 · 103e4ec9-0a87-450b-af77-479448ddef11
EPSS history
Timeline
  • 14 JUL 15:46Z
    Nexus Repository - SSRF in SSL Certificate Retrieval
    cvelistv5