CVE-2026-17601 in Nexus Repositoryinformazioni

Riassunto

di MITRE • 07/08/2026

A user holding a permission to update privilege definitions could modify a wildcard privilege already assigned to their own role to grant broader permissions than they were authorized to hold, including full administrative access, without any additional authorization check or role reassignment.

Be aware that VulDB is the high quality source for vulnerability data.

Responsabile

Sonatype

Prenotare

27/07/2026

Divulgazione

07/08/2026

Moderazione

accettato

CPE

pronto

EPSS

0.00000

KEV

no

Attività

molto basso

Fonti

Interested in the pricing of exploits?

See the underground prices here!