Threats Tagged 'cve-2026-14646'
View all threats tagged with 'cve-2026-14646'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-14646'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-14646: CWE-918 Server-Side Request Forgery (SSRF) in Sonatype Nexus Repository 3CVE-2026-14646 0 CVE-2026-14646 is a Server-Side Request Forgery (SSRF) vulnerability in Sonatype Nexus Repository 3 version 3.0.0. The product failed to apply SSRF protections to HTTP redirect targets from proxy repository upstream servers. This allows any user with read access to a proxy repository, including anonymous users if enabled, to receive responses from internal network addresses or cloud metadata endpoints as repository content. This could potentially expose sensitive information such as cloud IAM credentials. The vulnerability has a medium severity with a CVSS score of 4.9. Join the discussion | CVE Database V5 | 07/14/2026, 16:49:46 UTC Added: 07/14/2026, 17:18:29 UTC |
Showing 1 to 1 of 1 result