CVE ID :CVE-2026-113374 Published : Nov. 4, 2026, 8:18 p.m. | 47 minutes ago Description :Sonatype Nexus Repository 3 does not require realm administration permission when a user creates a Rut Auth capability. A user who holds only the capability creation permission...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-113374 - Nexus Repository 3 - Privilege Escalation via Rut Auth Capability Creation

VERWANDTEARTIKEL

Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released

CVE-2026-122224 - WebVirtCloud through commit bb920b0 Missing Authorization in REST API Migrate and Create Endpoints

CVE-2026-122134 - Mistral Vibe before 2.25.7 Code Execution via Git Filter Drivers

CVE-2026-122135 - Mistral Vibe before 3.0.3 RCE via Repository-Configured gpg.program

CVE-2026-122133 - Mistral Vibe before 2.25.5 on Windows Untrusted Search Path RCE via git.exe

CVE-2026-122130 - CESNET ipfixcol2 2.3.0 before 2.9.0 Buffer Overflow via Forwarder Output Plugin