CVE-2026-97666 | Sonatype Nexus Repository up to 3.96.x ExtDirect Endpoint information disclosure (EUVD-2026-102153)

October 15, 2026 Yanac

A vulnerability identified as problematic has been detected in Sonatype Nexus Repository up to 3.96.x. This vulnerability affects unknown code of the component ExtDirect Endpoint. This manipulation causes information disclosure.

The identification of this vulnerability is CVE-2026-97666. It is possible to initiate the attack remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More