CVE-2026-77123

概要

参考情報

• help.sonatype.com/en/sonatype-nexus-repository-3-96-0-release-notes.html · Release Notes
• support.sonatype.com/hc/en-us/articles/54639904174099 · Vendor Advisory

nexus repository manager のその他の脆弱性

• CVE-2026-77125高 7.1A vulnerability was identified in Sonatype Nexus Repository 3 in which two blobstore group management REST API endpoints did not correctly e…
• CVE-2026-77124高 7.2In affected versions of Nexus Repository 3, the script execution endpoint (POST /service/rest/v1/script/{name}/run) did not verify whether s…
• CVE-2026-77122中 4.3An authorization flaw in the REST API repository details endpoint (GET /service/rest/v1/repositories/{repositoryName}) in Sonatype Nexus Rep…
• CVE-2026-77121中 6.5A user account with permission to deploy artifacts to a hosted Maven repository could upload a POM file containing an oversized metadata fie…
• CVE-2026-17603高 8.8Nexus Repository 3 did not sufficiently restrict which HikariCP connection-pool properties could be set through the DataStore configuration …