A vulnerability described as problematic has been identified in Sonatype Nexus Repository up to 3.93.x. This issue affects some unknown processing of the component Proxy Repository. Such manipulation leads to server-side request forgery.

This vulnerability is traded as CVE-2026-14646. The attack may be launched remotely. There is no exploit available.