THREAT OPS › Threat News › [NVD] CVE-2026-14504 (MEDIUM 6.5) — An authorization bypass in Nexus Repository 3's component upload API allowed a user with only read/browse privileges on a Swift, Terraform, or Conda hosted repository to upload arbitrary artifacts, bypassing the intended write-permission check.
[NVD] CVE-2026-14504 (MEDIUM 6.5) — An authorization bypass in Nexus Repository 3's component upload API allowed a user with only read/browse privileges on a Swift, Terraform, or Conda hosted repository to upload arbitrary artifacts, bypassing the intended write-permission check.
CVE-2026-14504 CVSS: 6.5 MEDIUM Published: 2026-07-14T16:16:45.423
An authorization bypass in Nexus Repository 3's component upload API allowed a user with only read/browse privileges on a Swift, Terraform, or Conda hosted repository to upload arbitrary artifacts, bypassing the intended write-permission check.
Indicators of compromise
- CVE-2026-14504cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-14504