sonatype Latest High & Critical Vulnerabilities

Latest High & Critical vulnerabilities published by sonatype

JSON RSS CSV 🔔 Create Alert Trigger

7 August 2026

Privilege Escalation Vulnerability in Nexus Repository by Sonatype
CVE-2026-14644
SonatypeNexus Repository 38.6HIGH
Vulnerability in Nexus Repository 3 and 2 by Sonatype: Unvalidated Realm Identifier Submission
CVE-2026-17593
SonatypeNexus Repository7.2HIGH
Authorization Flaw in Sonatype Nexus Repository Affects Multiple Versions
CVE-2026-17594
SonatypeNexus Repository 38.2HIGH
Session Management Flaw in Sonatype Nexus Repository by Sonatype
CVE-2026-17600
SonatypeNexus Repository 38.7HIGH
Wildcard Privilege Modification in Sonatype Nexus Repository
CVE-2026-17601
SonatypeNexus Repository 38.9HIGH
SQL Injection Vulnerability in Nexus Repository by Sonatype
CVE-2026-17603
SonatypeNexus Repository 38.7HIGH

14 July 2026

16 June 2026

Unauthorized Command Execution in Sonatype Nexus Repository by Authenticated Users
CVE-2026-10748
SonatypeNexus Repository8.6HIGH

11 June 2026

Credential-Guessing Vulnerability in Sonatype Nexus Repository Software
CVE-2026-3329
SonatypeNexus Repository Manager8.7HIGH

15 April 2026

Hard-coded Credentials Vulnerability in Sonatype Nexus Repository Manager
CVE-2026-5189
SonatypeNexus Repository9.2CRITICAL

8 April 2026

Task Management Vulnerability in Sonatype Nexus Repository
CVE-2026-3199
SonatypeNexus Repository9.4CRITICAL

8 October 2025

Server-Side Request Forgery in Sonatype Nexus Repository
CVE-2025-9868
SonatypeNexus Repository8.7HIGH

16 May 2024

Unauthenticated Path Traversal Vulnerability in Sonatype Nexus Repository
CVE-2024-4956
SonatypeNexus Repository🥇📈👾🟡EPSS 18%📰7.5HIGH

3 October 2022

Weak Password Encryption in Sonatype Nexus Repository Manager LDAP Integration
CVE-2017-17717
SonatypeNexus Repository Manager9.8CRITICAL

7 September 2021

HTTP Header Injection Vulnerability in Sonatype Nexus Repository
CVE-2021-40143
SonatypeNexus Repository Manag...8.2HIGH

12 October 2020

Directory Traversal Vulnerability in Sonatype Nexus Repository Manager
CVE-2020-15012
SonatypeNexus Repository Manager8.6HIGH

12 August 2020

Incorrect Access Control in Sonatype Nexus Repository Manager
CVE-2020-15868
SonatypeNexus Repository Manager7.5HIGH

31 July 2020

Remote Code Execution Vulnerability in Sonatype Nexus Repository Manager
CVE-2020-15871
SonatypeNexus Repository Manag...8.8HIGH

20 April 2020

Security Flaw in Sonatype Nexus Repository Manager allowing Script Execution
CVE-2020-11753
SonatypeNexus Repository Manag...8.8HIGH

2 April 2020

Access Control Flaw in Sonatype Nexus Repository Manager by Sonatype
CVE-2020-11444
SonatypeNexus👾🟡8.8HIGH

1 April 2020

1 November 2019

OS Command Injection Vulnerability in Nexus Repository Manager by Sonatype
CVE-2019-15588
SonatypeNexus Repository Manager👾🟡7.2HIGH

21 October 2019

Remote Code Execution Vulnerability in Sonatype Nexus Repository Manager and IQ Server
CVE-2019-16530
SonatypeNexus Repository Manager7.2HIGH