Server-Side Request Forgery Vulnerability in Nexus Repository by Sonatype
CVE-2026-17597

5.1MEDIUM

Key Information:

Vendor

Sonatype

Status
Nexus Repository 3
Vendor
CVE Published:
7 August 2026

What is CVE-2026-17597?

Nexus Repository 3 is susceptible to a Server-Side Request Forgery (SSRF) vulnerability in its email configuration verification feature. This issue allows an authenticated user with nexus:settings:update permission to input arbitrary host and port values into the email test endpoint. Consequently, the server may initiate unintended outbound network connections to internal or restricted addresses. Attackers can exploit variations in the server's responses to deduce the reachability of internal hosts and ports. This vulnerability affects Nexus Repository 3 CE and Pro versions up to 3.94.1 and has been addressed in version 3.95.0.

Affected Version(s)

Nexus Repository 3 3.0.0 < 3.95.0

References

https://help.sonatype.com/en/sonatype-nexus-repository-3-...
patch
https://support.sonatype.com/hc/en-us/articles/5387696808...
vendor-advisory

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Sanjok Karki (@thesanjok), National Forensic Sciences University, Goa
.