CVE-2026-14504 — Nexus Repository 3 - Authorization Bypass in Component Upload API
An authorization bypass in Nexus Repository 3's component upload API allowed a user with only read/browse privileges on a Swift, Terraform, or Conda hosted repository to upload …
Published: 2026-07-14 · CVSS: 8.2 · CVSS 4.0
An authorization bypass in Nexus Repository 3's component upload API allowed a user with only read/browse privileges on a Swift, Terraform, or Conda hosted repository to upload arbitrary artifacts, bypassing the intended write-permission check.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7