CVEs we hold for Sonatype
Records whose assigning authority named Sonatype as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-77125Nexus Repository 3 - Incorrect Authorization on Blobstore Group EndpointsSonatype Nexus Repository 3
CVE-2026-77124Nexus Repository 3 - Script Execution Disable Setting Not EnforcedSonatype Nexus Repository 3
CVE-2026-77123Nexus Repository 3 - Webhook Secret Disclosure via Capability Read APISonatype Nexus Repository 3
CVE-2026-77122Nexus Repository 3 - Incorrect Authorization Allows Disclosure of Member Repository Metadata via Group Repository…Sonatype Nexus Repository 3
CVE-2026-77121Nexus Repository 3 - Denial of Service via Unbounded Maven POM Metadata FieldsSonatype Nexus Repository 3
CVE-2026-7308Nexus Repository 3 - Stored Cross-Site Scripting (XSS) via HTML Browse PageSonatype Nexus Repository
CVE-2026-5189Nexus Repository 3 - Hardcoded Credential in Internal Database ComponentSonatype Nexus Repository
CVE-2026-3438Nexus Repository 3 - Reflected Cross-Site Scripting (XSS) in ?describe PagesSonatype Nexus Repository
CVE-2026-3329Nexus Repository Manager - Improper Restriction of Excessive Authentication AttemptsSonatype Nexus Repository Manager
CVE-2026-3199Nexus Repository 3 - Authenticated Remote Code Execution via Task Property InjectionSonatype Nexus Repository
CVE-2026-17603Nexus Repository 3 - HikariCP connectionInitSql Injection RCE via DataStore Configuration APISonatype Nexus Repository 3
CVE-2026-17601Nexus Repository 3 - Wildcard Privilege Update Self-Escalation to AdministratorSonatype Nexus Repository 3
CVE-2026-17600Nexus Repository 3 - Session Not Invalidated on User Account Deletion or DeactivationSonatype
CVE-2026-17599Nexus Repository 3 - Unverified Onboarding State on change-admin-password EndpointSonatype Nexus Repository 3
CVE-2026-17598Nexus Repository 3 - Improper Input Validation in Scheduled Task ConfigurationSonatype Nexus Repository 3
CVE-2026-17597Nexus Repository 3 - Server-Side Request Forgery via Email Configuration VerificationSonatype Nexus Repository 3
CVE-2026-17596Nexus Repository 3 - Stored Cross-Site Scripting (XSS) via Blob Store NameSonatype Nexus Repository 3
CVE-2026-17595Nexus Repository 3 - JEXL Content Selector Sandbox Property-Read BypassSonatype Nexus Repository 3
CVE-2026-17594Nexus Repository 3 - Authorization Bypass in Repository CreationSonatype Nexus Repository 3
CVE-2026-17593Nexus Repository - Arbitrary Class Instantiation via Unsafe Realm ConfigurationSonatype Nexus Repository
CVE-2026-14646Nexus Repository 3 - Server-Side Request Forgery (SSRF) via HTTP RedirectSonatype Nexus Repository 3
CVE-2026-14645Nexus Repository 3 - Server-Side Request Forgery (SSRF) via Webhook: Global CapabilitySonatype Nexus Repository 3
CVE-2026-14504Nexus Repository 3 - Authorization Bypass in Component Upload APISonatype Nexus Repository 3
CVE-2026-11403Nexus Repository Manager - Insufficient Entropy in Format-Specific API Key GenerationSonatype Nexus Repository Manager
CVE-2026-10748Nexus Repository 3 - Remote Code Execution via License DeserializationSonatype Nexus Repository
CVE-2026-10741Nexus Repository Manager - Incorrect Authorization allows credential disclosure via proxy repository configurationSonatype Nexus Repository Manager
CVE-2026-0600Nexus Repository 3 - Server-Side Request Forgery in Proxy Repository ConfigurationSonatype Nexus Repository
CVE-2025-9868Nexus Repository 2 - SSRF Vulnerability in Remote Browser PluginSonatype Nexus Repository
CVE-2024-5764Nexus Repository 3 - Static hard-coded encryption passphrase used by defaultSonatype Nexus Repository
38 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.