Nexus Repository 3 vulnerabilities and CVEs

Known vulnerabilities affecting Nexus Repository 3, with exploit availability attached to each one, so you can tell a flaw someone has written code for from one nobody has.

7 vulnerabilities tracked.

9.1 Sonatype Nexus Repository 3 Pro does not check the local account status when a user signs in through a configured SAML or OAuth2/OpenID… CVE-2026-113373 4 Nov 2026
8.6 Sonatype Nexus Repository 3 does not require realm administration permission when a user creates a Rut Auth capability. CVE-2026-113374 4 Nov 2026
7.7 Sonatype Nexus Repository 3 contains a SQL injection vulnerability in the optional "Reindex Search Tables By Pattern" task. CVE-2026-113370 4 Nov 2026
7.1 Sonatype Nexus Repository 3 returns the signing passphrase of an APT or YUM repository, through an internal REST endpoint, to a user… CVE-2026-113371 4 Nov 2026
7.1 Sonatype Nexus Repository 3 returns the private signing key of a YUM proxy or group repository to an account that holds only the read… CVE-2026-113372 4 Nov 2026
6.3 Sonatype Nexus Repository 3 allows a user account that can push manifests to a hosted OCI repository (a user account that holds the edit… CVE-2026-113369 4 Nov 2026
5.3 Sonatype Nexus Repository 3 does not check that a user account is authorized to access a repository before the repository is added as a… CVE-2026-113368 4 Nov 2026

What this covers

This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that Nexus Repository 3 is free of vulnerabilities.

Query this from an agent over MCP · Check a lockfile by version

Other products tracked here