Skip to contentSonatype Nexus Repository 3 vulnerabilities
- sonatype nexus repository 3Nexus Repository 3 - Insufficiently Protected Credentials in Repository Signing PassphraseCVE-2026-1133717.1 High
- sonatype nexus repository 3Nexus Repository 3 - SQL Injection in Reindex Search by Pattern TaskCVE-2026-1133707.7 High
- sonatype nexus repository 3Nexus Repository 3 - Stored Cross-Site Scripting in OCI Attestations TabCVE-2026-1133696.3 Medium
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Group Repository Member Authorization BypassCVE-2026-1133685.3 Medium
- sonatype nexus repository 3Nexus Repository 3 - Privilege Escalation via Rut Auth Capability CreationCVE-2026-1133748.6 High
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Disabled or Locked Single Sign-On Users Can Sign In AgainCVE-2026-1133739.1 Critical
- sonatype nexus repository 3Nexus Repository 3 - Insufficiently Protected Credentials in YUM Repository Signing KeyCVE-2026-1133727.1 High
- sonatype nexus repository 3Nexus Repository 3 - Privilege Escalation via Role ManagementCVE-2026-977128.7 High
- sonatype nexus repository 3Nexus Repository 3 - Stored Cross-Site Scripting in Browse UICVE-2026-976675.1 Medium
- sonatype nexus repository 3Nexus Repository 3 - Unsafe Reflection in ExtDirect Repository EndpointCVE-2026-976666.9 Medium
- sonatype nexus repository 3Nexus Repository 3 - Missing Authorization on NuGet Symbol Package UploadCVE-2026-976657.1 High
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Denial of Service via Unbounded Maven POM Metadata FieldsCVE-2026-771215.3 Medium
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Incorrect Authorization on Blobstore Group EndpointsCVE-2026-771257.1 High
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Script Execution Disable Setting Not EnforcedCVE-2026-771247.5 High
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Webhook Secret Disclosure via Capability Read APICVE-2026-771236.0 Medium
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Incorrect Authorization Allows Disclosure of Member Repository Metadata via Group Repository PermissionsCVE-2026-771225.3 Medium
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - JEXL Content Selector Sandbox Property-Read BypassCVE-2026-175955.3 Medium
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Authorization Bypass in Repository CreationCVE-2026-175948.2 High
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Privilege EscalationCVE-2026-146448.6 High
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Wildcard Privilege Update Self-Escalation to AdministratorCVE-2026-176018.9 High
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Session Not Invalidated on User Account Deletion or DeactivationCVE-2026-176008.7 High
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Unverified Onboarding State on change-admin-password EndpointCVE-2026-175996.9 Medium
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Improper Input Validation in Scheduled Task ConfigurationCVE-2026-175985.3 Medium
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Stored Cross-Site Scripting (XSS) via Blob Store NameCVE-2026-175966.3 Medium
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - HikariCP connectionInitSql Injection RCE via DataStore Configuration APICVE-2026-176038.7 High
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Server-Side Request Forgery via Email Configuration VerificationCVE-2026-175975.1 Medium
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Server-Side Request Forgery (SSRF) via HTTP RedirectCVE-2026-146464.9 Medium
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Server-Side Request Forgery (SSRF) via Webhook: Global CapabilityCVE-2026-146455.1 Medium
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Authorization Bypass in Component Upload APICVE-2026-145048.2 High