CVE-2026-14646: Nexus Repository 3 - Server-Side Request Forgery (SSRF) via HTTP Redirect
Nexus Repository 3 did not apply its existing Server-Side Request Forgery (SSRF) protections to HTTP redirect targets returned by proxy repository upstream servers. Any user with read access to a proxy repository backed by an attacker-controlled or compromised upstream server — including an anonymous user, if anonymous access is enabled — could receive a response from an internal network address or cloud metadata endpoint as repository content, potentially exposing sensitive information such as cloud IAM credentials.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-14646?
CVE-2026-14646 has a medium severity rating of 4.9 according to the CVSS score.
What is CVE-2026-14646?
CVE-2026-14646 is a vulnerability in Nexus Repository 3 that allows Server-Side Request Forgery (SSRF) through HTTP redirect.
How do I fix CVE-2026-14646?
To fix CVE-2026-14646, upgrade to a patched version of Nexus Repository 3 that addresses the SSRF vulnerability.
Who is affected by CVE-2026-14646?
Any user with read access to a proxy repository backed by an attacker-controlled or compromised upstream server is affected by CVE-2026-14646.
What are the consequences of CVE-2026-14646?
CVE-2026-14646 can allow an attacker to make unauthorized requests to internal services, potentially leading to data exposure or further exploitation.