CVE-2026-17596
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
Nexus Repository 3 is vulnerable to stored cross-site scripting (XSS). A user with nexus:blobstores:create or nexus:blobstores:update permission could set a blob store name containing malicious script, which would later execute in another user's browser when viewing system health-check status. Fixed in version 3.95.0.
Risk Assessment
The risk includes the possibility of malicious script execution in an administrator's or other user's browser, potentially leading to session theft, account takeover, or other attacks. This requires user interaction.
Recommendation
It is recommended to update to version 3.95.0 or later and to restrict blob store creation/update permissions to trusted users. Also, educate users about the risk of clicking suspicious links.
Original NVD description (English source)
Nexus Repository 3 was found to be vulnerable to stored cross-site scripting (XSS). A user with the nexus:blobstores:create or nexus:blobstores:update permission could set a blob store name containing malicious script content, which would later execute in the browser of another user viewing system health-check status. This issue has been fixed in version 3.95.0.