Vulnerability · Published Jul 14, 2026 · Assigned by Sonatype

CVE-2026-7494Nexus Repository - SSRF in SSL Certificate Retrieval

Medium 5.3

In plain English

A medium-severity server-side request forgery in Nexus Repository from Sonatype. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 8% of all known vulnerabilities).

Severity (CVSS 4.0)5.3Medium

Exploit odds (30 days)0.2%top 91.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Nexus Repository 3 is vulnerable to Server-Side Request Forgery (SSRF) via the SSL Certificate Retrieval endpoint. A user holding the nexus:ssl-truststore:read permission could cause the server to initiate outbound connections to internal or otherwise restricted network hosts. This issue affects Nexus Repository 3.0.0 through versions prior to 3.94.0.

Affected products (as reported)

Vendor	Product	Versions
Sonatype	Nexus Repository	3.0.0 – before 3.94.0

Weakness: CWE-918 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:L/SI:N/SA:N

In plain English

Official description

Affected products (as reported)

References