CVE-2026-97666
— UNSCOREDPublished 2026-10-15 · Updated 2026-10-16
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
Sonatype Nexus Repository 3 allows an unauthenticated remote attacker to supply attacker-controlled input to a Java class loading call through an ExtDirect endpoint. This allows the attacker to learn whether specific classes are present in the application. The issue does not by itself allow code execution.
Weaknesses
CWE-470
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- CRITICALCVE-2017-20285PoC
- HIGHCVE-2026-100308PoC
- HIGHCVE-2026-101292
- HIGHCVE-2026-102094PoC
- LOWCVE-2026-102580
- HIGHCVE-2026-104629PoC
- MEDIUMCVE-2026-105064
- HIGHCVE-2026-105782PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.