Vulnerability Description
Nexus Repository 3 is vulnerable to Server-Side Request Forgery (SSRF) via the SSL Certificate Retrieval endpoint. A user holding the nexus:ssl-truststore:read permission could cause the server to initiate outbound connections to internal or otherwise restricted network hosts. This issue affects Nexus Repository 3.0.0 through versions prior to 3.94.0.
Related Weaknesses (CWE)
References
- https://help.sonatype.com/en/sonatype-nexus-repository-3-94-0-release-notes.html
- https://support.sonatype.com/hc/en-us/articles/53126069518227
FAQ
What is CVE-2026-7494?
CVE-2026-7494 is a documented vulnerability. Nexus Repository 3 is vulnerable to Server-Side Request Forgery (SSRF) via the SSL Certificate Retrieval endpoint. A user holding the nexus:ssl-truststore:read permission could cause the server to ini...
How severe is CVE-2026-7494?
CVSS scoring is not yet available for CVE-2026-7494. Check NVD for updates.
Is there a patch for CVE-2026-7494?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.