Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how sonatype compares to other vendors in security performance

View Risk Score →

Sonatype Nexus Repository 3Nexus Repository - Arbitrary Class Instantiation via Unsafe Realm Configuration

Risk 57
Severity
7.2
First published (updated )
CVE-2026-17593

Sonatype Nexus Repository 3Nexus Repository 3 - JEXL Content Selector Sandbox Property-Read Bypass

Risk 26
Severity
5.3
First published (updated )
CVE-2026-17595

Sonatype Nexus Repository 3Nexus Repository 3 - Authorization Bypass in Repository Creation

Risk 40
Severity
8.2
First published (updated )
CVE-2026-17594

Sonatype Nexus Repository 3Nexus Repository 3 - Privilege Escalation

Risk 62
Severity
8.6
First published (updated )
CVE-2026-14644

Sonatype Nexus Repository 3Nexus Repository 3 - Unverified Onboarding State on change-admin-password Endpoint

Risk 36
Severity
6.9
First published (updated )
CVE-2026-17599
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Sonatype Nexus Repository 3Nexus Repository 3 - Improper Input Validation in Scheduled Task Configuration

Risk 34
Severity
5.3
First published (updated )
CVE-2026-17598

Sonatype Nexus Repository 3Nexus Repository 3 - Session Not Invalidated on User Account Deletion or Deactivation

Risk 79
Severity
8.7
First published (updated )
CVE-2026-17600

Sonatype Nexus Repository 3Nexus Repository 3 - Stored Cross-Site Scripting (XSS) via Blob Store Name

Risk 55
Severity
6.3
First published (updated )
CVE-2026-17596

Sonatype Nexus Repository 3Nexus Repository 3 - Wildcard Privilege Update Self-Escalation to Administrator

Risk 76
Severity
8.9
First published (updated )
CVE-2026-17601

Sonatype Nexus Repository 3Nexus Repository 3 - Server-Side Request Forgery via Email Configuration Verification

Risk 24
Severity
5.1
First published (updated )
CVE-2026-17597
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Sonatype Nexus Repository 3Nexus Repository 3 - HikariCP connectionInitSql Injection RCE via DataStore Configuration API

Risk 79
Severity
8.7
First published (updated )
CVE-2026-17603

Sonatype Nexus Repository 3Nexus Repository 3 - Server-Side Request Forgery (SSRF) via HTTP Redirect

Risk 33
Severity
4.9
First published (updated )
CVE-2026-14646

Sonatype Nexus Repository 3Nexus Repository 3 - Server-Side Request Forgery (SSRF) via Webhook: Global Capability

Risk 33
Severity
5.1
First published (updated )
CVE-2026-14645

Sonatype Nexus Repository 3Nexus Repository 3 - Authorization Bypass in Component Upload API

Risk 43
Severity
8.2
First published (updated )
CVE-2026-14504

Sonatype Nexus Repository 3Nexus Repository - SSRF in SSL Certificate Retrieval

Risk 26
Severity
5.3
First published (updated )
CVE-2026-7494
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Sonatype Nexus Repository ManagerNexus Repository Manager - Insufficient Entropy in Format-Specific API Key Generation

Risk 47
Severity
8.7
First published (updated )
CVE-2026-11403

Sonatype Nexus 3.94End of life details

EOL
Jan 9, 2028
Support Ends
Jul 9, 2027
First published (updated )
EOL-nexus-3.94

Sonatype Nexus Repository ManagerNexus Repository Manager - Incorrect Authorization allows credential disclosure via proxy repository configuration

Risk 32
Severity
5.9
First published (updated )
CVE-2026-10741

Sonatype Nexus Repository 3Nexus Repository 3 - Remote Code Execution via License Deserialization

Risk 72
Severity
8.6
First published (updated )
CVE-2026-10748

Sonatype Nexus Repository ManagerNexus Repository Manager - Improper Restriction of Excessive Authentication Attempts

Risk 47
Severity
8.7
First published (updated )
CVE-2026-3329
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Sonatype Nexus 3.93End of life details

EOL
Dec 4, 2027
Support Ends
Jun 4, 2027
First published (updated )
EOL-nexus-3.93

Sonatype Nexus RepositoryNexus Repository 3 - Stored Cross-Site Scripting (XSS) via HTML Browse Page

Risk 24
Severity
5.1
EPSS
0.05%
First published (updated )
CVE-2026-7308

Sonatype Nexus Repository ManagerNexus Repository 3 - Improper LDAP Referral Handling

Risk 31
Severity
5.1
First published (updated )
CVE-2026-3048

Sonatype Nexus 3.92End of life details

EOL
Nov 7, 2027
Support Ends
May 7, 2027
First published (updated )
EOL-nexus-3.92

Sonatype Nexus Repository ManagerNexus Repository 3 - Hardcoded Credential in Internal Database Component

Risk 57
Severity
9.2
EPSS
0.02%
First published (updated )
CVE-2026-5189
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Sonatype Nexus RepositoryNexus Repository 3 - Authenticated Remote Code Execution via Task Property Injection

Risk 81
Severity
9.4
First published (updated )
CVE-2026-3199

Sonatype Nexus RepositoryNexus Repository 3 - Reflected Cross-Site Scripting (XSS) in ?describe Pages

Risk 27
Severity
5.1
First published (updated )
CVE-2026-3438

Sonatype Nexus 3.91End of life details

EOL
Oct 7, 2027
Support Ends
Apr 7, 2027
First published (updated )
EOL-nexus-3.91

Sonatype Nexus 3.90End of life details

EOL
Sep 5, 2027
Support Ends
Mar 5, 2027
First published (updated )
EOL-nexus-3.90

Sonatype Nexus 3.89End of life details

EOL
Aug 3, 2027
Support Ends
Feb 3, 2027
First published (updated )
EOL-nexus-3.89
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203