UpHeron
All vulnerabilities

Servers and applications

CVE-2026-97666

Nexus Repository 3 - Unsafe Reflection in ExtDirect Repository Endpoint

Severity
Medium 6.9
Published
15 Oct 2026
Last changed
15 Oct 2026
Added to UpHeron
3 Nov 2026
Fixed in
3.97.0
Sources
CVE Program

Affected software

SoftwareAffected versions
Sonatype Nexus RepositoryServers and applications · cna:sonatype|nexus repository 3
  • From 3.0.0 before 3.97.0
Sonatype Nexus RepositoryServers and applications · cpe:a:sonatype:nexus_repository_manager
  • From 3.0.0 before 3.97.0

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-97666