CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-14644

Nexus Repository 3 contained a privilege escalation vulnerability in the REST privileges API. An authenticated user with permission to manage privileges could, under certain role configurations, escalate their own access to full administrator by exploiting a type-confusion flaw in the privilege update endpoint.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.006

EPSS Ranking 49.3%

CVSS Severity

CVSS v3 Score 7.2

References

Products affected by CVE-2026-14644

Sonatype » Nexus Repository Manager » Version: 3.19.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.19.0
Sonatype » Nexus Repository Manager » Version: 3.19.0-01

cpe:2.3:a:sonatype:nexus_repository_manager:3.19.0-01
Sonatype » Nexus Repository Manager » Version: 3.19.1

cpe:2.3:a:sonatype:nexus_repository_manager:3.19.1
Sonatype » Nexus Repository Manager » Version: 3.19.1-01

cpe:2.3:a:sonatype:nexus_repository_manager:3.19.1-01
Sonatype » Nexus Repository Manager » Version: 3.20.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.20.0
Sonatype » Nexus Repository Manager » Version: 3.20.0-04

cpe:2.3:a:sonatype:nexus_repository_manager:3.20.0-04
Sonatype » Nexus Repository Manager » Version: 3.20.1

cpe:2.3:a:sonatype:nexus_repository_manager:3.20.1
Sonatype » Nexus Repository Manager » Version: 3.21.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.21.0
Sonatype » Nexus Repository Manager » Version: 3.21.0-05

cpe:2.3:a:sonatype:nexus_repository_manager:3.21.0-05
Sonatype » Nexus Repository Manager » Version: 3.21.1

cpe:2.3:a:sonatype:nexus_repository_manager:3.21.1
Sonatype » Nexus Repository Manager » Version: 3.21.2

cpe:2.3:a:sonatype:nexus_repository_manager:3.21.2
Sonatype » Nexus Repository Manager » Version: 3.21.2-03

cpe:2.3:a:sonatype:nexus_repository_manager:3.21.2-03
Sonatype » Nexus Repository Manager » Version: 3.22.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.22.0
Sonatype » Nexus Repository Manager » Version: 3.22.0-02

cpe:2.3:a:sonatype:nexus_repository_manager:3.22.0-02
Sonatype » Nexus Repository Manager » Version: 3.22.1

cpe:2.3:a:sonatype:nexus_repository_manager:3.22.1
Sonatype » Nexus Repository Manager » Version: 3.22.1-02

cpe:2.3:a:sonatype:nexus_repository_manager:3.22.1-02
Sonatype » Nexus Repository Manager » Version: 3.23.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.23.0
Sonatype » Nexus Repository Manager » Version: 3.23.0-03

cpe:2.3:a:sonatype:nexus_repository_manager:3.23.0-03
Sonatype » Nexus Repository Manager » Version: 3.24.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.24.0
Sonatype » Nexus Repository Manager » Version: 3.24.0-0

cpe:2.3:a:sonatype:nexus_repository_manager:3.24.0-0
Sonatype » Nexus Repository Manager » Version: 3.25.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.25.0
Sonatype » Nexus Repository Manager » Version: 3.25.0-03

cpe:2.3:a:sonatype:nexus_repository_manager:3.25.0-03
Sonatype » Nexus Repository Manager » Version: 3.25.1

cpe:2.3:a:sonatype:nexus_repository_manager:3.25.1
Sonatype » Nexus Repository Manager » Version: 3.25.1-02

cpe:2.3:a:sonatype:nexus_repository_manager:3.25.1-02
Sonatype » Nexus Repository Manager » Version: 3.26.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.26.0
Sonatype » Nexus Repository Manager » Version: 3.26.0-04

cpe:2.3:a:sonatype:nexus_repository_manager:3.26.0-04
Sonatype » Nexus Repository Manager » Version: 3.26.1

cpe:2.3:a:sonatype:nexus_repository_manager:3.26.1
Sonatype » Nexus Repository Manager » Version: 3.27.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.27.0
Sonatype » Nexus Repository Manager » Version: 3.27.0-03

cpe:2.3:a:sonatype:nexus_repository_manager:3.27.0-03
Sonatype » Nexus Repository Manager » Version: 3.28.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.28.0
Sonatype » Nexus Repository Manager » Version: 3.28.0-01

cpe:2.3:a:sonatype:nexus_repository_manager:3.28.0-01
Sonatype » Nexus Repository Manager » Version: 3.28.1

cpe:2.3:a:sonatype:nexus_repository_manager:3.28.1
Sonatype » Nexus Repository Manager » Version: 3.28.1-01

cpe:2.3:a:sonatype:nexus_repository_manager:3.28.1-01
Sonatype » Nexus Repository Manager » Version: 3.29.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.29.0
Sonatype » Nexus Repository Manager » Version: 3.29.0-02

cpe:2.3:a:sonatype:nexus_repository_manager:3.29.0-02
Sonatype » Nexus Repository Manager » Version: 3.29.1

cpe:2.3:a:sonatype:nexus_repository_manager:3.29.1
Sonatype » Nexus Repository Manager » Version: 3.29.1-01

cpe:2.3:a:sonatype:nexus_repository_manager:3.29.1-01
Sonatype » Nexus Repository Manager » Version: 3.29.2

cpe:2.3:a:sonatype:nexus_repository_manager:3.29.2
Sonatype » Nexus Repository Manager » Version: 3.29.2-02

cpe:2.3:a:sonatype:nexus_repository_manager:3.29.2-02
Sonatype » Nexus Repository Manager » Version: 3.30.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.30.0
Sonatype » Nexus Repository Manager » Version: 3.30.0-01

cpe:2.3:a:sonatype:nexus_repository_manager:3.30.0-01
Sonatype » Nexus Repository Manager » Version: 3.30.1

cpe:2.3:a:sonatype:nexus_repository_manager:3.30.1
Sonatype » Nexus Repository Manager » Version: 3.30.1-01

cpe:2.3:a:sonatype:nexus_repository_manager:3.30.1-01
Sonatype » Nexus Repository Manager » Version: 3.31.0-01

cpe:2.3:a:sonatype:nexus_repository_manager:3.31.0-01
Sonatype » Nexus Repository Manager » Version: 3.31.1-01

cpe:2.3:a:sonatype:nexus_repository_manager:3.31.1-01
Sonatype » Nexus Repository Manager » Version: 3.32.0-03

cpe:2.3:a:sonatype:nexus_repository_manager:3.32.0-03
Sonatype » Nexus Repository Manager » Version: 3.33.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.33.0
Sonatype » Nexus Repository Manager » Version: 3.33.0-01

cpe:2.3:a:sonatype:nexus_repository_manager:3.33.0-01
Sonatype » Nexus Repository Manager » Version: 3.33.1-01

cpe:2.3:a:sonatype:nexus_repository_manager:3.33.1-01
Sonatype » Nexus Repository Manager » Version: 3.34.0-01

cpe:2.3:a:sonatype:nexus_repository_manager:3.34.0-01
Sonatype » Nexus Repository Manager » Version: 3.34.1-01

cpe:2.3:a:sonatype:nexus_repository_manager:3.34.1-01
Sonatype » Nexus Repository Manager » Version: 3.35.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.35.0
Sonatype » Nexus Repository Manager » Version: 3.35.0-02

cpe:2.3:a:sonatype:nexus_repository_manager:3.35.0-02
Sonatype » Nexus Repository Manager » Version: 3.36.0-01

cpe:2.3:a:sonatype:nexus_repository_manager:3.36.0-01
Sonatype » Nexus Repository Manager » Version: 3.37.3

cpe:2.3:a:sonatype:nexus_repository_manager:3.37.3
Sonatype » Nexus Repository Manager » Version: 3.38.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.38.0
Sonatype » Nexus Repository Manager » Version: 3.38.1

cpe:2.3:a:sonatype:nexus_repository_manager:3.38.1
Sonatype » Nexus Repository Manager » Version: 3.39.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.39.0
Sonatype » Nexus Repository Manager » Version: 3.40.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.40.0
Sonatype » Nexus Repository Manager » Version: 3.40.1

cpe:2.3:a:sonatype:nexus_repository_manager:3.40.1
Sonatype » Nexus Repository Manager » Version: 3.41.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.41.0
Sonatype » Nexus Repository Manager » Version: 3.41.1

cpe:2.3:a:sonatype:nexus_repository_manager:3.41.1
Sonatype » Nexus Repository Manager » Version: 3.42.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.42.0
Sonatype » Nexus Repository Manager » Version: 3.43.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.43.0
Sonatype » Nexus Repository Manager » Version: 3.44.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.44.0
Sonatype » Nexus Repository Manager » Version: 3.45.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.45.0
Sonatype » Nexus Repository Manager » Version: 3.45.1

cpe:2.3:a:sonatype:nexus_repository_manager:3.45.1
Sonatype » Nexus Repository Manager » Version: 3.46.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.46.0
Sonatype » Nexus Repository Manager » Version: 3.47.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.47.0
Sonatype » Nexus Repository Manager » Version: 3.47.1

cpe:2.3:a:sonatype:nexus_repository_manager:3.47.1
Sonatype » Nexus Repository Manager » Version: 3.48.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.48.0
Sonatype » Nexus Repository Manager » Version: 3.49.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.49.0
Sonatype » Nexus Repository Manager » Version: 3.50.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.50.0
Sonatype » Nexus Repository Manager » Version: 3.51.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.51.0
Sonatype » Nexus Repository Manager » Version: 3.52.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.52.0
Sonatype » Nexus Repository Manager » Version: 3.53.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.53.0
Sonatype » Nexus Repository Manager » Version: 3.53.1

cpe:2.3:a:sonatype:nexus_repository_manager:3.53.1
Sonatype » Nexus Repository Manager » Version: 3.54.1

cpe:2.3:a:sonatype:nexus_repository_manager:3.54.1
Sonatype » Nexus Repository Manager » Version: 3.55.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.55.0
Sonatype » Nexus Repository Manager » Version: 3.56.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.56.0
Sonatype » Nexus Repository Manager » Version: 3.57.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.57.0
Sonatype » Nexus Repository Manager » Version: 3.57.1

cpe:2.3:a:sonatype:nexus_repository_manager:3.57.1
Sonatype » Nexus Repository Manager » Version: 3.58.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.58.0
Sonatype » Nexus Repository Manager » Version: 3.58.1

cpe:2.3:a:sonatype:nexus_repository_manager:3.58.1
Sonatype » Nexus Repository Manager » Version: 3.59.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.59.0
Sonatype » Nexus Repository Manager » Version: 3.60.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.60.0
Sonatype » Nexus Repository Manager » Version: 3.61.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.61.0
Sonatype » Nexus Repository Manager » Version: 3.62.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.62.0
Sonatype » Nexus Repository Manager » Version: 3.63.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.63.0
Sonatype » Nexus Repository Manager » Version: 3.64.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.64.0
Sonatype » Nexus Repository Manager » Version: 3.65.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.65.0
Sonatype » Nexus Repository Manager » Version: 3.66.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.66.0
Sonatype » Nexus Repository Manager » Version: 3.67.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.67.0
Sonatype » Nexus Repository Manager » Version: 3.67.1

cpe:2.3:a:sonatype:nexus_repository_manager:3.67.1
Sonatype » Nexus Repository Manager » Version: 3.68.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.68.0
Sonatype » Nexus Repository Manager » Version: 3.68.1

cpe:2.3:a:sonatype:nexus_repository_manager:3.68.1
Sonatype » Nexus Repository Manager » Version: 3.69.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.69.0
Sonatype » Nexus Repository Manager » Version: 3.70.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.70.0
Sonatype » Nexus Repository Manager » Version: 3.70.1

cpe:2.3:a:sonatype:nexus_repository_manager:3.70.1
Sonatype » Nexus Repository Manager » Version: 3.71.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.71.0
Sonatype » Nexus Repository Manager » Version: 3.72.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.72.0
Sonatype » Nexus Repository Manager » Version: 3.73.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.73.0
Sonatype » Nexus Repository Manager » Version: 3.74.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.74.0
Sonatype » Nexus Repository Manager » Version: 3.75.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.75.0
Sonatype » Nexus Repository Manager » Version: 3.75.1

cpe:2.3:a:sonatype:nexus_repository_manager:3.75.1
Sonatype » Nexus Repository Manager » Version: 3.76.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.76.0
Sonatype » Nexus Repository Manager » Version: 3.76.1

cpe:2.3:a:sonatype:nexus_repository_manager:3.76.1
Sonatype » Nexus Repository Manager » Version: 3.77.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.77.0
Sonatype » Nexus Repository Manager » Version: 3.77.1

cpe:2.3:a:sonatype:nexus_repository_manager:3.77.1
Sonatype » Nexus Repository Manager » Version: 3.77.2

cpe:2.3:a:sonatype:nexus_repository_manager:3.77.2
Sonatype » Nexus Repository Manager » Version: 3.78.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.78.0
Sonatype » Nexus Repository Manager » Version: 3.78.1

cpe:2.3:a:sonatype:nexus_repository_manager:3.78.1
Sonatype » Nexus Repository Manager » Version: 3.78.2

cpe:2.3:a:sonatype:nexus_repository_manager:3.78.2
Sonatype » Nexus Repository Manager » Version: 3.79.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.79.0
Sonatype » Nexus Repository Manager » Version: 3.79.1

cpe:2.3:a:sonatype:nexus_repository_manager:3.79.1
Sonatype » Nexus Repository Manager » Version: 3.80.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.80.0
Sonatype » Nexus Repository Manager » Version: 3.81.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.81.0
Sonatype » Nexus Repository Manager » Version: 3.81.1

cpe:2.3:a:sonatype:nexus_repository_manager:3.81.1
Sonatype » Nexus Repository Manager » Version: 3.82.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.82.0
Sonatype » Nexus Repository Manager » Version: 3.82.1

cpe:2.3:a:sonatype:nexus_repository_manager:3.82.1
Sonatype » Nexus Repository Manager » Version: 3.83.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.83.0
Sonatype » Nexus Repository Manager » Version: 3.83.1

cpe:2.3:a:sonatype:nexus_repository_manager:3.83.1
Sonatype » Nexus Repository Manager » Version: 3.83.2

cpe:2.3:a:sonatype:nexus_repository_manager:3.83.2
Sonatype » Nexus Repository Manager » Version: 3.84.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.84.0
Sonatype » Nexus Repository Manager » Version: 3.84.1

cpe:2.3:a:sonatype:nexus_repository_manager:3.84.1
Sonatype » Nexus Repository Manager » Version: 3.84.2

cpe:2.3:a:sonatype:nexus_repository_manager:3.84.2
Sonatype » Nexus Repository Manager » Version: 3.85.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.85.0
Sonatype » Nexus Repository Manager » Version: 3.85.1

cpe:2.3:a:sonatype:nexus_repository_manager:3.85.1
Sonatype » Nexus Repository Manager » Version: 3.86.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.86.0
Sonatype » Nexus Repository Manager » Version: 3.86.2

cpe:2.3:a:sonatype:nexus_repository_manager:3.86.2
Sonatype » Nexus Repository Manager » Version: 3.86.3

cpe:2.3:a:sonatype:nexus_repository_manager:3.86.3
Sonatype » Nexus Repository Manager » Version: 3.87.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.87.0
Sonatype » Nexus Repository Manager » Version: 3.87.1

cpe:2.3:a:sonatype:nexus_repository_manager:3.87.1
Sonatype » Nexus Repository Manager » Version: 3.87.2

cpe:2.3:a:sonatype:nexus_repository_manager:3.87.2
Sonatype » Nexus Repository Manager » Version: 3.88.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.88.0
Sonatype » Nexus Repository Manager » Version: 3.89.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.89.0
Sonatype » Nexus Repository Manager » Version: 3.89.1

cpe:2.3:a:sonatype:nexus_repository_manager:3.89.1
Sonatype » Nexus Repository Manager » Version: 3.90.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0
Sonatype » Nexus Repository Manager » Version: 3.90.1

cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1
Sonatype » Nexus Repository Manager » Version: 3.90.2

cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2
Sonatype » Nexus Repository Manager » Version: 3.90.3

cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3
Sonatype » Nexus Repository Manager » Version: 3.90.4

cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4
Sonatype » Nexus Repository Manager » Version: 3.91.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0
Sonatype » Nexus Repository Manager » Version: 3.91.1

cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1
Sonatype » Nexus Repository Manager » Version: 3.92.1

cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1
Sonatype » Nexus Repository Manager » Version: 3.92.2

cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2
Sonatype » Nexus Repository Manager » Version: 3.92.3

cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3
Sonatype » Nexus Repository Manager » Version: 3.93.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0
Sonatype » Nexus Repository Manager » Version: 3.93.1

cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1
Sonatype » Nexus Repository Manager » Version: 3.93.2

cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2
Sonatype » Nexus Repository Manager » Version: 3.94.0

cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-14644

Products

Pricing

Contact Us