Report: CVE-2026-0600 - Nexus Repository 3 - Server-Side Request Forgery in Proxy Repository Configuration

CVE ID : CVE-2026-0600 Published : Jan. 14, 2026, 11:15 p.m. | 33 minutes ago Description : Server-Side Request Forgery (SSRF) vulnerability in Sonatype Nexus Repository 3 versions 3.0.0 and later allows authenticated administrators to configure proxy repositories with URLs that can access unintended network destinations, potentially including cloud metadata services and internal network resources. A workaround configuration is available starting in version 3.88.0, but the product remains vulnerable by default. Severity: 6.2 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Source: Telegram CVE Monitor