Security Advisory
CVE-2026-14504
N/A
UNKNOWN
Vulnerability Description
An authorization bypass in Nexus Repository 3's component upload API allowed a user with only read/browse privileges on a Swift, Terraform, or Conda hosted repository to upload arbitrary artifacts, bypassing the intended write-permission check.
Published Date
July 14, 2026
Official Source
NIST NVD Advisory