Question 1

What is CVE-2026-14504 — CVE-2026-14504?

Accepted Answer

An authorization bypass in Nexus Repository 3's component upload API allowed a user with only read/browse privileges on a Swift, Terraform, or Conda hosted repository to upload arbitrary artifacts, bypassing the intended write-permission check.

Question 2

What is the authoritative source for CVE-2026-14504?

Accepted Answer

CVE-2026-14504 (CVE-2026-14504) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-14504CVE-2026-14504

Description

Scoring