CVE-2026-17598

Name of the Vulnerable Software and Affected Versions Sonatype Nexus Repository 3 (affected versions not specified)

Description An issue exists where internal configuration keys are not properly filtered from user-supplied task properties during the creation or update of a scheduled task via the administrative UI. An account with permissions to create at least one scheduled task type can provide a crafted property value to overwrite the configuration of an unrelated, existing task instead of creating a new one.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.