CyberRota
← Ana sayfaya dön

CVE-2026-7494

UNKNOWN · CVSS N/A

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-07-14T16:17:04.953 · Çekilme zamanı: 2026-07-14T18:29:32.037584+00:00

CyberRota Yorumu

Detaylı analiz gerekiyor.

CVE
CVE-2026-7494
Severity
UNKNOWN
CVSS
N/A
EPSS
Yok

Orijinal NVD Açıklaması

Nexus Repository 3 is vulnerable to Server-Side Request Forgery (SSRF) via the SSL Certificate Retrieval endpoint. A user holding the nexus:ssl-truststore:read permission could cause the server to initiate outbound connections to internal or otherwise restricted network hosts. This issue affects Nexus Repository 3.0.0 through versions prior to 3.94.0.