Sonatype vulnerabilities
49 published CVEs name Sonatype among the affected products.
- 49Published CVEs49 of them scored
- 43Last 12 monthspublished in the last year
- 3Critical21 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-113368
Nexus Repository 3 - Group Repository Member Authorization Bypass
Sonatype · Nexus Repository 3
Medium5.3 - CVE-2026-113369
Nexus Repository 3 - Stored Cross-Site Scripting in OCI Attestations Tab
Sonatype · Nexus Repository 3
Medium6.3 - CVE-2026-113370
Nexus Repository 3 - SQL Injection in Reindex Search by Pattern Task
Sonatype · Nexus Repository 3
High7.7 - CVE-2026-113371
Nexus Repository 3 - Insufficiently Protected Credentials in Repository Signing Passphrase
Sonatype · Nexus Repository 3
High7.1 - CVE-2026-113372
Nexus Repository 3 - Insufficiently Protected Credentials in YUM Repository Signing Key
Sonatype · Nexus Repository 3
High7.1 - CVE-2026-113373
Nexus Repository 3 - Disabled or Locked Single Sign-On Users Can Sign In Again
Sonatype · Nexus Repository 3
Critical9.1 - CVE-2026-113374
Nexus Repository 3 - Privilege Escalation via Rut Auth Capability Creation
Sonatype · Nexus Repository 3
High8.6 - CVE-2026-97712
Nexus Repository 3 - Privilege Escalation via Role Management
Sonatype · Nexus Repository 3
High8.7 - CVE-2026-97667
Nexus Repository 3 - Stored Cross-Site Scripting in Browse UI
Sonatype · Nexus Repository 3
Medium5.1 - CVE-2026-97666
Nexus Repository 3 - Unsafe Reflection in ExtDirect Repository Endpoint
Sonatype · Nexus Repository 3
Medium6.9