UpHeron
All vulnerabilities

Servers and applications

CVE-2026-97665

Nexus Repository 3 - Missing Authorization on NuGet Symbol Package Upload

Severity
High 7.1
Published
15 Oct 2026
Last changed
15 Oct 2026
Added to UpHeron
3 Nov 2026
Fixed in
3.97.0
Sources
CVE Program

Affected software

SoftwareAffected versions
Sonatype Nexus RepositoryServers and applications · cna:sonatype|nexus repository 3
  • From 3.95.0 before 3.97.0
Sonatype Nexus RepositoryServers and applications · cpe:a:sonatype:nexus_repository_manager
  • From 3.95.0 before 3.97.0

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-97665