CVE-2026-14644 — Nexus Repository 3 - Privilege Escalation
Nexus Repository 3 contained a privilege escalation vulnerability in the REST privileges API. An authenticated user with permission to manage privileges could, under certain rol…
Published: 2026-08-07 · CVSS: 8.6 · CVSS 4.0
Nexus Repository 3 contained a privilege escalation vulnerability in the REST privileges API. An authenticated user with permission to manage privileges could, under certain role configurations, escalate their own access to full administrator by exploiting a type-confusion flaw in the privilege update endpoint.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7