Skip to content

CVE record · 1 source

CVE-2026-97712

Sonatype Nexus Repository 3 allows a user that holds the role create or role update permission to grant roles and privileges that the account does…

Vendor: Sonatype / JFrog
Product: Java libraries / app servers, Nexus Repository / Artifactory
Exposure class: Web platform, Developer platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

5

CVE NVD 16d ago

Sonatype Nexus Repository 3 allows a user that holds the role create or role update permission to grant roles and privileges that the account does…

Sonatype Nexus Repository 3 allows a user that holds the role create or role update permission to grant roles and privileges that the account does not hold. This can give the user more access than intended, up to full…

CVE-2026-97712 Sonatype / JFrog