Skip to contentSonatype Nexus Repository vulnerabilities
- sonatype nexus repository 3Nexus Repository 3 - Insufficiently Protected Credentials in Repository Signing PassphraseCVE-2026-1133717.1 High
- sonatype nexus repository 3Nexus Repository 3 - SQL Injection in Reindex Search by Pattern TaskCVE-2026-1133707.7 High
- sonatype nexus repository 3Nexus Repository 3 - Stored Cross-Site Scripting in OCI Attestations TabCVE-2026-1133696.3 Medium
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Group Repository Member Authorization BypassCVE-2026-1133685.3 Medium
- sonatype nexus repository 3Nexus Repository 3 - Privilege Escalation via Rut Auth Capability CreationCVE-2026-1133748.6 High
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Disabled or Locked Single Sign-On Users Can Sign In AgainCVE-2026-1133739.1 Critical
- sonatype nexus repository 3Nexus Repository 3 - Insufficiently Protected Credentials in YUM Repository Signing KeyCVE-2026-1133727.1 High
- sonatype nexus repository 3Nexus Repository 3 - Privilege Escalation via Role ManagementCVE-2026-977128.7 High
- sonatype nexus repository 3Nexus Repository 3 - Stored Cross-Site Scripting in Browse UICVE-2026-976675.1 Medium
- sonatype nexus repository 3Nexus Repository 3 - Unsafe Reflection in ExtDirect Repository EndpointCVE-2026-976666.9 Medium
- sonatype nexus repository 3Nexus Repository 3 - Missing Authorization on NuGet Symbol Package UploadCVE-2026-976657.1 High
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Denial of Service via Unbounded Maven POM Metadata FieldsCVE-2026-771215.3 Medium
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Incorrect Authorization on Blobstore Group EndpointsCVE-2026-771257.1 High
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Script Execution Disable Setting Not EnforcedCVE-2026-771247.5 High
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Webhook Secret Disclosure via Capability Read APICVE-2026-771236.0 Medium
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Incorrect Authorization Allows Disclosure of Member Repository Metadata via Group Repository PermissionsCVE-2026-771225.3 Medium
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - JEXL Content Selector Sandbox Property-Read BypassCVE-2026-175955.3 Medium
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Authorization Bypass in Repository CreationCVE-2026-175948.2 High
- sonatype nexus repository, nexus repository manager +1 moreNexus Repository - Arbitrary Class Instantiation via Unsafe Realm ConfigurationCVE-2026-175937.2 High
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Privilege EscalationCVE-2026-146448.6 High
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Wildcard Privilege Update Self-Escalation to AdministratorCVE-2026-176018.9 High
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Session Not Invalidated on User Account Deletion or DeactivationCVE-2026-176008.7 High
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Unverified Onboarding State on change-admin-password EndpointCVE-2026-175996.9 Medium
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Improper Input Validation in Scheduled Task ConfigurationCVE-2026-175985.3 Medium
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Stored Cross-Site Scripting (XSS) via Blob Store NameCVE-2026-175966.3 Medium
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - HikariCP connectionInitSql Injection RCE via DataStore Configuration APICVE-2026-176038.7 High
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Server-Side Request Forgery via Email Configuration VerificationCVE-2026-175975.1 Medium
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Server-Side Request Forgery (SSRF) via HTTP RedirectCVE-2026-146464.9 Medium
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Server-Side Request Forgery (SSRF) via Webhook: Global CapabilityCVE-2026-146455.1 Medium
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Authorization Bypass in Component Upload APICVE-2026-145048.2 High
- sonatype nexus repository, nexus repository manager +1 moreNexus Repository - SSRF in SSL Certificate RetrievalCVE-2026-74945.3 Medium
- sonatype nexus repository managerNexus Repository Manager - Insufficient Entropy in Format-Specific API Key GenerationCVE-2026-114038.7 High
- sonatype nexus repository managerNexus Repository Manager - Incorrect Authorization allows credential disclosure via proxy repository configurationCVE-2026-107415.9 Medium
- sonatype nexus repository, nexus repository manager +1 moreNexus Repository 3 - Remote Code Execution via License DeserializationCVE-2026-107488.6 High
- sonatype nexus repository managerNexus Repository Manager - Improper Restriction of Excessive Authentication AttemptsCVE-2026-33298.7 High
- sonatype nexus repository, nexus repository manager +1 moreNexus Repository 3 - Stored Cross-Site Scripting (XSS) via HTML Browse PageCVE-2026-73085.1 Medium
- sonatype nexus repository, nexus repository manager +1 moreNexus Repository 3 - Improper LDAP Referral HandlingCVE-2026-30485.1 Medium
- sonatype nexus repository, nexus repository manager +1 moreNexus Repository 3 - Hardcoded Credential in Internal Database ComponentCVE-2026-51899.2 Critical
- sonatype nexus repository, nexus repository manager +1 moreNexus Repository 3 - Authenticated Remote Code Execution via Task Property InjectionCVE-2026-31999.4 Critical
- sonatype nexus repository, nexus repository manager +1 moreNexus Repository 3 - Reflected Cross-Site Scripting (XSS) in ?describe PagesCVE-2026-34385.1 Medium
- sonatype nexus repositoryNexus Repository 3 - Server-Side Request Forgery in Proxy Repository ConfigurationCVE-2026-06006.2 Medium
- sonatype nexus repositoryNexus Repository 3 - Cross-Site ScriptingCVE-2026-06015.1 Medium
- sonatype nexus repositoryNexus Repository 3 - Stored Cross-Site Scripting (XSS)CVE-2025-134885.1 Medium
- sonatype nexus repositoryNexus Repository 2 - SSRF Vulnerability in Remote Browser PluginCVE-2025-98688.7 High
- sonatype nexus repositoryNexus Repository 2 - Remote Code ExecutionCVE-2024-5082Public exploit7.1 High
- sonatype nexus repositoryNexus Repository 2 - Stored XSSCVE-2024-5083Public exploit5.1 Medium
- sonatype nexus repository, nexus repository manager +1 moreNexus Repository 3 - Static hard-coded encryption passphrase used by defaultCVE-2024-5764Public exploit5.9 Medium
- sonatype nexus repositoryNexus Repository 3 - Path TraversalCVE-2024-4956Public exploitEPSS 19.2%7.5 High
- sonatype nexus, nexus repository +1 moreNexus Repository Manager 3 - Remote Code ExecutionCVE-2020-10199In KEVPublic exploitFix availableEPSS 99.1%8.8 High
- sonatype nexus repository managerThere is an OS Command Injection in Nexus Repository Manager <= 2.14.14 (bypass CVE-2019-5475)...CVE-2019-15588Public exploit7.2 High
- Show moreLoading…