THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-7494 (MEDIUM 5.0) — Nexus Repository 3 is vulnerable to Server-Side Request Forgery (SSRF) via the SSL Certificate Retrieval endpoint. A user holding the nexus:ssl-truststore:read permission could cause the server to initiate outbound connections to internal or otherwise restricted network hosts. Th

[NVD] CVE-2026-7494 (MEDIUM 5.0) — Nexus Repository 3 is vulnerable to Server-Side Request Forgery (SSRF) via the SSL Certificate Retrieval endpoint. A user holding the nexus:ssl-truststore:read permission could cause the server to initiate outbound connections to internal or otherwise restricted network hosts. Th

lownvdPublished 2026-07-14

CVE-2026-7494 CVSS: 5.0 MEDIUM Published: 2026-07-14T16:17:04.953

Nexus Repository 3 is vulnerable to Server-Side Request Forgery (SSRF) via the SSL Certificate Retrieval endpoint. A user holding the nexus:ssl-truststore:read permission could cause the server to initiate outbound connections to internal or otherwise restricted network hosts. This issue affects Nexus Repository 3.0.0 through versi

Indicators of compromise

CVE-2026-7494cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-7494