SSRF in Sonatype Nexus Repository 3

CVE-2026-17597

Nexus Repository 3 contains a Server-Side Request Forgery (SSRF) vulnerability in the email configuration verification feature. A user holding the nexus:settings:update permission could submit arbitrary host and port values to the email te…

Vulnerability class: SSRF (Server-Side Request Forgery)