CVE-2026-97665

Vendor

Microsoft, Sonatype / JFrog

Product

Visual Studio / .NET, Java libraries / app servers, Nexus Repository / Artifactory

Exposure class

Developer platform, Web platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 11
   CVE NVD 16d ago

   A missing authorization check in Nexus Repository 3's NuGet Components API upload path allows an account holding only repository read and browse…

   A missing authorization check in Nexus Repository 3's NuGet Components API upload path allows an account holding only repository read and browse privileges to upload and persist NuGet symbol packages (.snupkg) to a hosted…

   CVE-2026-97665 Microsoft Sonatype / JFrog