Sonatype vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Exploited Sonatype flaws

These are on CISA’s Known Exploited Vulnerabilities list, newest first. If you run any of these products, these come before everything else.

• CVE-2019-7238 Sonatype Nexus Repository Manager Incorrect Access ControlExploited since Dec 10, 2021 · CVSS 9.8
• CVE-2020-10199 Sonatype Nexus Repository Remote Code ExecutionExploited since Nov 3, 2021 · CVSS 8.8

Latest high and critical flaws

• CVE-2026-97712 Sonatype Nexus Repository 3 allows a user that holds the role create or role update permission to grant roles and privileges that the account does not hold.High 8.7 · Oct 15, 2026
• CVE-2026-97665 A missing authorization check in Nexus Repository 3's NuGet Components API upload path allows an account holding only repository read and browse privileges to uHigh 7.1 · Oct 15, 2026
• CVE-2026-77125 A vulnerability was identified in Sonatype Nexus Repository 3 in which two blobstore group management REST API endpoints did not correctly enforce the intended High 7.1 · Sep 2, 2026
• CVE-2026-77124 In affected versions of Nexus Repository 3, the script execution endpoint (POST /service/rest/v1/script/{name}/run) did not verify whether script execution had High 7.5 · Sep 2, 2026
• CVE-2026-17603 Nexus Repository 3 did not sufficiently restrict which HikariCP connection-pool properties could be set through the DataStore configuration API.High 8.7 · Aug 7, 2026
• CVE-2026-17601 A user holding a permission to update privilege definitions could modify a wildcard privilege already assigned to their own role to grant broader permissions thHigh 8.9 · Aug 7, 2026
• CVE-2026-17600 Sonatype Nexus Repository 3 did not immediately terminate a user's active login session or revoke their cached permissions when that user's account was deleted,High 8.7 · Aug 7, 2026
• CVE-2026-17594 Nexus Repository 3 CE/Pro versions 3.0.0 through 3.94.x contain an incorrect authorization vulnerability (CWE-863) in the repository-creation user interface.High 8.2 · Aug 7, 2026
• CVE-2026-17593 An account holding the nexus:settings:update permission in Nexus Repository 3 (or the equivalent nexus:settings permission in the legacy Nexus Repository 2) couHigh 7.2 · Aug 7, 2026
• CVE-2026-14644 Nexus Repository 3 contained a privilege escalation vulnerability in the REST privileges API.High 8.6 · Aug 7, 2026
• CVE-2026-14504 An authorization bypass in Nexus Repository 3's component upload API allowed a user with only read/browse privileges on a Swift, Terraform, or Conda hosted repoHigh 8.2 · Jul 14, 2026
• CVE-2026-11403 A vulnerability in Sonatype Nexus Repository Manager's format-specific API key generation may allow a remote attacker to gain unauthorized access to repository High 8.7 · Jul 14, 2026
• CVE-2026-10748 An authenticated user with the nx-licensing-create privilege can upload a specially crafted license file to execute arbitrary operating system commands as the NHigh 8.6 · Jun 16, 2026
• CVE-2026-3329 A remote unauthenticated attacker may be able to conduct credential-guessing attacks against user accounts in Sonatype Nexus Repository via authentication endpoHigh 8.7 · Jun 11, 2026
• CVE-2026-5189 CWE-798: Use of Hard-coded Credentials in Sonatype Nexus Repository Manager versions 3.0.0 through 3.70.5 allows an unauthenticated attacker with network accessCritical 9.2 · Apr 15, 2026
• CVE-2026-3199 A vulnerability in the task management component of Sonatype Nexus Repository versions 3.22.1 through 3.90.2 allows an authenticated attacker with task creationCritical 9.4 · Apr 8, 2026
• CVE-2025-9868 Server-Side Request Forgery (SSRF) in the Remote Browser Plugin in Sonatype Nexus Repository 2.x up to and including 2.15.2 allows unauthenticated remote attackHigh 8.7 · Oct 8, 2025
• CVE-2024-5082 A Remote Code Execution vulnerability has been discovered in Sonatype Nexus Repository 2.High 7.1 · Nov 13, 2024
• CVE-2024-4956 Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read system files.High 7.5 · May 16, 2024
• CVE-2021-40143 Sonatype Nexus Repository 3.x through 3.33.1-01 is vulnerable to an HTTP header injection.High 8.2 · Sep 7, 2021
• CVE-2020-15012 A Directory Traversal issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.19.High 8.6 · Oct 12, 2020
• CVE-2020-15868 Sonatype Nexus Repository Manager OSS/Pro before 3.26.0 has Incorrect Access Control.High 7.5 · Aug 12, 2020
• CVE-2020-15871 Sonatype Nexus Repository Manager OSS/Pro version before 3.25.1 allows Remote Code Execution.High 8.8 · Jul 31, 2020
• CVE-2020-11753 An issue was discovered in Sonatype Nexus Repository Manager in versions 3.21.1 and 3.22.0.High 8.8 · Apr 20, 2020
• CVE-2020-11444 Sonatype Nexus Repository Manager 3.x up to and including 3.21.2 has Incorrect Access Control.High 8.8 · Apr 2, 2020