Vulnerability-Lookup

Search criteria

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

CVE-2026-113374 (GCVE-0-2026-113374)

Vulnerability from nvd – Published: 2026-11-04 20:01 – Updated: 2026-11-04 20:01

Title

Nexus Repository 3 - Privilege Escalation via Rut Auth Capability Creation

Summary

Sonatype Nexus Repository 3 does not require realm administration permission when a user creates a Rut Auth capability. A user who holds only the capability creation permission (nexus:capabilities:create) can create this capability, which turns on header-based authentication for the instance. A remote client can then authenticate as an existing user, including an administrator, without credentials.

Severity

8.6 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

CWE

CWE-862 - Missing Authorization

Assigner

Sonatype CNA under the mitre root

CNA scorecard B 90/100 over 35 records in the last 180 days details

References

2 references

URL	Tags
https://help.sonatype.com/en/sonatype-nexus-repos…	patch
https://support.sonatype.com/hc/en-us/articles/56…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Sonatype	Nexus Repository 3	Affected: 3.0.0 , < 3.98.0 (semver) cpe:2.3:a:sonatype:nexus_repository_manager:3.0.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.0.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.0.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.1.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.2.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.2.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.3.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.3.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.3.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.4.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.5.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.5.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.5.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.6.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.6.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.6.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.7.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.7.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.8.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.9.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.10.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.11.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.12.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.12.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.13.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.14.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.15.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.15.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.15.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.15.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.16.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.16.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.16.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.17.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.17.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.17.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.18.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.18.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.19.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.19.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.20.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.20.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.20.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.20.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.21.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.21.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.21.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.22.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.22.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.23.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.24.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.24.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.25.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.25.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.26.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.26.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.27.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.28.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.28.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.29.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.29.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.29.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.30.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.30.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.31.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.31.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.32.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.32.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.33.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.33.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.34.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.34.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.35.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.36.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.38.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.38.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.39.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.40.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.40.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.41.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.41.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.42.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.43.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.44.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.45.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.45.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.46.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.47.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.47.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.48.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.49.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.50.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.51.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.52.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.53.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.53.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.54.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.54.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.55.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.56.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.57.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.57.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.58.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.58.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.59.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.60.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.61.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.62.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.63.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.64.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.65.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.66.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.67.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.67.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.68.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.68.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.69.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.71.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.72.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.73.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.74.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.75.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.75.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.76.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.76.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.79.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.79.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.80.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.81.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.81.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.82.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.82.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.85.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.85.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.88.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.88.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.89.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.89.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.5:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.97.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.97.1:::::::*

Credits

0xoroot-sec

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.0.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.0.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.0.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.1.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.2.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.2.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.3.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.3.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.3.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.4.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.5.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.5.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.5.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.6.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.6.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.6.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.7.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.7.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.8.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.9.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.10.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.11.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.12.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.12.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.13.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.14.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.15.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.15.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.15.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.15.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.16.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.16.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.16.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.17.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.17.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.17.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.18.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.18.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.19.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.19.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.20.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.20.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.20.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.20.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.21.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.21.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.21.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.22.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.22.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.23.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.24.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.24.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.25.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.25.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.26.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.26.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.27.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.28.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.28.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.29.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.29.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.29.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.30.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.30.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.31.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.31.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.32.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.32.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.33.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.33.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.34.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.34.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.35.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.36.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.38.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.38.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.39.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.40.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.40.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.41.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.41.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.42.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.43.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.44.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.45.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.45.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.46.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.47.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.47.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.48.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.49.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.50.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.51.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.52.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.53.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.53.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.54.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.54.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.55.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.56.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.57.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.57.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.58.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.58.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.59.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.60.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.61.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.62.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.63.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.64.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.65.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.66.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.67.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.67.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.68.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.68.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.69.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.71.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.72.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.73.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.74.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.75.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.75.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.76.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.76.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.79.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.79.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.80.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.81.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.81.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.82.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.82.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.85.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.85.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.88.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.88.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.89.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.89.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.97.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.97.1:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "Nexus Repository 3",
          "vendor": "Sonatype",
          "versions": [
            {
              "lessThan": "3.98.0",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "0xoroot-sec"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eSonatype Nexus Repository 3 does not require realm administration permission when a user creates a Rut Auth capability. A user who holds only the capability creation permission (nexus:capabilities:create) can create this capability, which turns on header-based authentication for the instance. A remote client can then authenticate as an existing user, including an administrator, without credentials.\u003c/p\u003e"
            }
          ],
          "value": "Sonatype Nexus Repository 3 does not require realm administration permission when a user creates a Rut Auth capability. A user who holds only the capability creation permission (nexus:capabilities:create) can create this capability, which turns on header-based authentication for the instance. A remote client can then authenticate as an existing user, including an administrator, without credentials."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-862",
              "description": "CWE-862 Missing Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-04T20:01:19.329Z",
        "orgId": "103e4ec9-0a87-450b-af77-479448ddef11",
        "shortName": "Sonatype"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://help.sonatype.com/en/sonatype-nexus-repository-3-98-0-release-notes.html"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://support.sonatype.com/hc/en-us/articles/56616522124435/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Nexus Repository 3 - Privilege Escalation via Rut Auth Capability Creation",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "103e4ec9-0a87-450b-af77-479448ddef11",
    "assignerShortName": "Sonatype",
    "cveId": "CVE-2026-113374",
    "datePublished": "2026-11-04T20:01:19.329Z",
    "dateReserved": "2026-10-20T01:54:48.996Z",
    "dateUpdated": "2026-11-04T20:01:19.329Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-113373 (GCVE-0-2026-113373)

Vulnerability from nvd – Published: 2026-11-04 20:01 – Updated: 2026-11-04 20:01

Title

Nexus Repository 3 - Disabled or Locked Single Sign-On Users Can Sign In Again

Summary

Sonatype Nexus Repository 3 Pro does not check the local account status when a user signs in through a configured SAML or OAuth2/OpenID Connect identity provider. A user whose account was disabled or locked by an administrator in Nexus Repository can sign in again with valid identity provider credentials for the same account, and then receives a new session with the roles of that account. The attacker needs no Nexus Repository session and no Nexus Repository privilege. The attacker needs a named account that holds valid credentials at the identity provider. The anonymous user is not part of this attack path.

Severity

9.1 (Critical)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

CWE

CWE-1390 - Weak Authentication

Assigner

Sonatype CNA under the mitre root

CNA scorecard B 90/100 over 35 records in the last 180 days details

References

2 references

URL	Tags
https://help.sonatype.com/en/sonatype-nexus-repos…	patch
https://support.sonatype.com/hc/en-us/articles/56…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Sonatype	Nexus Repository 3	Affected: 3.86.0 , < 3.98.0 (semver) cpe:2.3:a:sonatype:nexus_repository_manager:3.86.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.88.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.88.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.89.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.89.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.5:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.97.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.97.1:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.88.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.88.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.89.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.89.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.97.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.97.1:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "Nexus Repository 3",
          "vendor": "Sonatype",
          "versions": [
            {
              "lessThan": "3.98.0",
              "status": "affected",
              "version": "3.86.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eSonatype Nexus Repository 3 Pro does not check the local account status when a user signs in through a configured SAML or OAuth2/OpenID Connect identity provider. A user whose account was disabled or locked by an administrator in Nexus Repository can sign in again with valid identity provider credentials for the same account, and then receives a new session with the roles of that account. The attacker needs no Nexus Repository session and no Nexus Repository privilege. The attacker needs a named account that holds valid credentials at the identity provider. The anonymous user is not part of this attack path.\u003c/p\u003e"
            }
          ],
          "value": "Sonatype Nexus Repository 3 Pro does not check the local account status when a user signs in through a configured SAML or OAuth2/OpenID Connect identity provider. A user whose account was disabled or locked by an administrator in Nexus Repository can sign in again with valid identity provider credentials for the same account, and then receives a new session with the roles of that account. The attacker needs no Nexus Repository session and no Nexus Repository privilege. The attacker needs a named account that holds valid credentials at the identity provider. The anonymous user is not part of this attack path."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1390",
              "description": "CWE-1390 Weak Authentication",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-04T20:01:19.624Z",
        "orgId": "103e4ec9-0a87-450b-af77-479448ddef11",
        "shortName": "Sonatype"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://help.sonatype.com/en/sonatype-nexus-repository-3-98-0-release-notes.html"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://support.sonatype.com/hc/en-us/articles/56614238092947/"
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "title": "Nexus Repository 3 - Disabled or Locked Single Sign-On Users Can Sign In Again",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "103e4ec9-0a87-450b-af77-479448ddef11",
    "assignerShortName": "Sonatype",
    "cveId": "CVE-2026-113373",
    "datePublished": "2026-11-04T20:01:19.624Z",
    "dateReserved": "2026-10-20T01:54:48.996Z",
    "dateUpdated": "2026-11-04T20:01:19.624Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-113372 (GCVE-0-2026-113372)

Vulnerability from nvd – Published: 2026-11-04 20:01 – Updated: 2026-11-04 20:01

Title

Nexus Repository 3 - Insufficiently Protected Credentials in YUM Repository Signing Key

Summary

Sonatype Nexus Repository 3 returns the private signing key of a YUM proxy or group repository to an account that holds only the read privilege for administering that repository. The account does not need the privilege to edit the repository. A party that holds the key can sign repository metadata as that repository.

Severity

7.1 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

CWE

CWE-522 - Insufficiently Protected Credentials

Assigner

Sonatype CNA under the mitre root

CNA scorecard B 90/100 over 35 records in the last 180 days details

References

2 references

URL	Tags
https://help.sonatype.com/en/sonatype-nexus-repos…	patch
https://support.sonatype.com/hc/en-us/articles/56…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Sonatype	Nexus Repository 3	Affected: 3.93.0 , < 3.98.0 (semver) cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.97.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.97.1:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.97.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.97.1:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "Nexus Repository 3",
          "vendor": "Sonatype",
          "versions": [
            {
              "lessThan": "3.98.0",
              "status": "affected",
              "version": "3.93.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eSonatype Nexus Repository 3 returns the private signing key of a YUM proxy or group repository to an account that holds only the read privilege for administering that repository. The account does not need the privilege to edit the repository. A party that holds the key can sign repository metadata as that repository.\u003c/p\u003e"
            }
          ],
          "value": "Sonatype Nexus Repository 3 returns the private signing key of a YUM proxy or group repository to an account that holds only the read privilege for administering that repository. The account does not need the privilege to edit the repository. A party that holds the key can sign repository metadata as that repository."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-522",
              "description": "CWE-522 Insufficiently Protected Credentials",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-04T20:01:19.849Z",
        "orgId": "103e4ec9-0a87-450b-af77-479448ddef11",
        "shortName": "Sonatype"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://help.sonatype.com/en/sonatype-nexus-repository-3-98-0-release-notes.html"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://support.sonatype.com/hc/en-us/articles/56612283547539/"
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "title": "Nexus Repository 3 - Insufficiently Protected Credentials in YUM Repository Signing Key",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "103e4ec9-0a87-450b-af77-479448ddef11",
    "assignerShortName": "Sonatype",
    "cveId": "CVE-2026-113372",
    "datePublished": "2026-11-04T20:01:19.849Z",
    "dateReserved": "2026-10-20T01:54:48.996Z",
    "dateUpdated": "2026-11-04T20:01:19.849Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-113371 (GCVE-0-2026-113371)

Vulnerability from nvd – Published: 2026-11-04 20:01 – Updated: 2026-11-04 20:01

Title

Nexus Repository 3 - Insufficiently Protected Credentials in Repository Signing Passphrase

Summary

Sonatype Nexus Repository 3 returns the signing passphrase of an APT or YUM repository, through an internal REST endpoint, to a user account that holds only the read privilege for administering that repository. The account does not need the privilege to edit the repository.

Severity

7.1 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

CWE

CWE-522 - Insufficiently Protected Credentials

Assigner

Sonatype CNA under the mitre root

CNA scorecard B 90/100 over 35 records in the last 180 days details

References

2 references

URL	Tags
https://help.sonatype.com/en/sonatype-nexus-repos…	patch
https://support.sonatype.com/hc/en-us/articles/56…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Sonatype	Nexus Repository 3	Affected: 3.93.0 , < 3.98.0 (semver) cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.97.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.97.1:::::::*

Credits

Ho Boon Suan

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.97.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.97.1:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "Nexus Repository 3",
          "vendor": "Sonatype",
          "versions": [
            {
              "lessThan": "3.98.0",
              "status": "affected",
              "version": "3.93.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Ho Boon Suan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eSonatype Nexus Repository 3 returns the signing passphrase of an APT or YUM repository, through an internal REST endpoint, to a user account that holds only the read privilege for administering that repository. The account does not need the privilege to edit the repository.\u003c/p\u003e"
            }
          ],
          "value": "Sonatype Nexus Repository 3 returns the signing passphrase of an APT or YUM repository, through an internal REST endpoint, to a user account that holds only the read privilege for administering that repository. The account does not need the privilege to edit the repository."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-522",
              "description": "CWE-522 Insufficiently Protected Credentials",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-04T20:01:20.078Z",
        "orgId": "103e4ec9-0a87-450b-af77-479448ddef11",
        "shortName": "Sonatype"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://help.sonatype.com/en/sonatype-nexus-repository-3-98-0-release-notes.html"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://support.sonatype.com/hc/en-us/articles/56609541356051/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Nexus Repository 3 - Insufficiently Protected Credentials in Repository Signing Passphrase",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "103e4ec9-0a87-450b-af77-479448ddef11",
    "assignerShortName": "Sonatype",
    "cveId": "CVE-2026-113371",
    "datePublished": "2026-11-04T20:01:20.078Z",
    "dateReserved": "2026-10-20T01:54:48.996Z",
    "dateUpdated": "2026-11-04T20:01:20.078Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-113370 (GCVE-0-2026-113370)

Vulnerability from nvd – Published: 2026-11-04 20:01 – Updated: 2026-11-04 20:01

Title

Nexus Repository 3 - SQL Injection in Reindex Search by Pattern Task

Summary

Sonatype Nexus Repository 3 contains a SQL injection vulnerability in the optional "Reindex Search Tables By Pattern" task. A user who holds the nexus:tasks:create privilege can supply a crafted filter condition that the database runs as SQL. This allows the user to modify data in the Nexus database. The task is available only when the non-default setting nexus.reindex.search.by.pattern.visible is set to true.

Severity

7.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CWE

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Assigner

Sonatype CNA under the mitre root

CNA scorecard B 90/100 over 35 records in the last 180 days details

References

2 references

URL	Tags
https://help.sonatype.com/en/sonatype-nexus-repos…	patch
https://support.sonatype.com/hc/en-us/articles/56…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Sonatype	Nexus Repository 3	Affected: 3.90.0 , < 3.98.0 (semver) cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.5:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.97.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.97.1:::::::*

Credits

Shreyas Chavhan (HackerOne: shreyaschavhan)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.97.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.97.1:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "Nexus Repository 3",
          "vendor": "Sonatype",
          "versions": [
            {
              "lessThan": "3.98.0",
              "status": "affected",
              "version": "3.90.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Shreyas Chavhan (HackerOne: shreyaschavhan)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eSonatype Nexus Repository 3 contains a SQL injection vulnerability in the optional \"Reindex Search Tables By Pattern\" task. A user who holds the nexus:tasks:create privilege can supply a crafted filter condition that the database runs as SQL. This allows the user to modify data in the Nexus database. The task is available only when the non-default setting nexus.reindex.search.by.pattern.visible is set to true.\u003c/p\u003e"
            }
          ],
          "value": "Sonatype Nexus Repository 3 contains a SQL injection vulnerability in the optional \"Reindex Search Tables By Pattern\" task. A user who holds the nexus:tasks:create privilege can supply a crafted filter condition that the database runs as SQL. This allows the user to modify data in the Nexus database. The task is available only when the non-default setting nexus.reindex.search.by.pattern.visible is set to true."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-89",
              "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-04T20:01:20.304Z",
        "orgId": "103e4ec9-0a87-450b-af77-479448ddef11",
        "shortName": "Sonatype"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://help.sonatype.com/en/sonatype-nexus-repository-3-98-0-release-notes.html"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://support.sonatype.com/hc/en-us/articles/56603207226131/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Nexus Repository 3 - SQL Injection in Reindex Search by Pattern Task",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "103e4ec9-0a87-450b-af77-479448ddef11",
    "assignerShortName": "Sonatype",
    "cveId": "CVE-2026-113370",
    "datePublished": "2026-11-04T20:01:20.304Z",
    "dateReserved": "2026-10-20T01:54:48.996Z",
    "dateUpdated": "2026-11-04T20:01:20.304Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-113369 (GCVE-0-2026-113369)

Vulnerability from nvd – Published: 2026-11-04 20:01 – Updated: 2026-11-04 20:01

Title

Nexus Repository 3 - Stored Cross-Site Scripting in OCI Attestations Tab

Summary

Sonatype Nexus Repository 3 allows a user account that can push manifests to a hosted OCI repository (a user account that holds the edit permission on that repository) to store script content in the artifact type field of an OCI manifest. The script runs in the browser of a user who opens the Attestations tab for the related image in the Browse user interface, with the permissions of the viewing user.

Severity

6.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N

CWE

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Assigner

Sonatype CNA under the mitre root

CNA scorecard B 90/100 over 35 records in the last 180 days details

References

2 references

URL	Tags
https://help.sonatype.com/en/sonatype-nexus-repos…	patch
https://support.sonatype.com/hc/en-us/articles/56…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Sonatype	Nexus Repository 3	Affected: 3.94.0 , < 3.98.0 (semver) cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.97.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.97.1:::::::*

Credits

Nguyen Truong Son (truongson526@gmail.com)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.97.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.97.1:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "Nexus Repository 3",
          "vendor": "Sonatype",
          "versions": [
            {
              "lessThan": "3.98.0",
              "status": "affected",
              "version": "3.94.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Nguyen Truong Son (truongson526@gmail.com)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eSonatype Nexus Repository 3 allows a user account that can push manifests to a hosted OCI repository (a user account that holds the edit permission on that repository) to store script content in the artifact type field of an OCI manifest. The script runs in the browser of a user who opens the Attestations tab for the related image in the Browse user interface, with the permissions of the viewing user.\u003c/p\u003e"
            }
          ],
          "value": "Sonatype Nexus Repository 3 allows a user account that can push manifests to a hosted OCI repository (a user account that holds the edit permission on that repository) to store script content in the artifact type field of an OCI manifest. The script runs in the browser of a user who opens the Attestations tab for the related image in the Browse user interface, with the permissions of the viewing user."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "PASSIVE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-04T20:01:20.533Z",
        "orgId": "103e4ec9-0a87-450b-af77-479448ddef11",
        "shortName": "Sonatype"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://help.sonatype.com/en/sonatype-nexus-repository-3-98-0-release-notes.html"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://support.sonatype.com/hc/en-us/articles/56597339691027/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Nexus Repository 3 - Stored Cross-Site Scripting in OCI Attestations Tab",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "103e4ec9-0a87-450b-af77-479448ddef11",
    "assignerShortName": "Sonatype",
    "cveId": "CVE-2026-113369",
    "datePublished": "2026-11-04T20:01:20.533Z",
    "dateReserved": "2026-10-20T01:54:48.996Z",
    "dateUpdated": "2026-11-04T20:01:20.533Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-113368 (GCVE-0-2026-113368)

Vulnerability from nvd – Published: 2026-11-04 20:01 – Updated: 2026-11-04 20:01

Title

Nexus Repository 3 - Group Repository Member Authorization Bypass

Summary

Sonatype Nexus Repository 3 does not check that a user account is authorized to access a repository before the repository is added as a member of a group repository. A user account that has signed in with valid credentials and holds the add or edit privilege on a group repository can add a repository that the account cannot read or browse, and then read the content of that repository through the group. The anonymous user can only do this if an administrator has explicitly granted it that privilege.

Severity

5.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

CWE

CWE-862 - Missing Authorization

Assigner

Sonatype CNA under the mitre root

CNA scorecard B 90/100 over 35 records in the last 180 days details

References

2 references

URL	Tags
https://help.sonatype.com/en/sonatype-nexus-repos…	patch
https://support.sonatype.com/hc/en-us/articles/56…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Sonatype	Nexus Repository 3	Affected: 3.0.0 , < 3.98.0 (semver) cpe:2.3:a:sonatype:nexus_repository_manager:3.0.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.0.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.0.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.1.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.2.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.2.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.3.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.3.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.3.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.4.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.5.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.5.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.5.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.6.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.6.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.6.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.7.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.7.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.8.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.9.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.10.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.11.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.12.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.12.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.13.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.14.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.15.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.15.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.15.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.15.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.16.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.16.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.16.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.17.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.17.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.17.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.18.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.18.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.19.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.19.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.20.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.20.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.20.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.20.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.21.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.21.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.21.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.22.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.22.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.23.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.24.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.24.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.25.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.25.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.26.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.26.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.27.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.28.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.28.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.29.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.29.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.29.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.30.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.30.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.31.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.31.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.32.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.32.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.33.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.33.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.34.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.34.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.35.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.36.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.38.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.38.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.39.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.40.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.40.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.41.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.41.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.42.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.43.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.44.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.45.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.45.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.46.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.47.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.47.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.48.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.49.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.50.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.51.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.52.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.53.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.53.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.54.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.54.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.55.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.56.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.57.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.57.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.58.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.58.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.59.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.60.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.61.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.62.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.63.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.64.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.65.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.66.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.67.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.67.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.68.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.68.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.69.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.5:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.71.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.72.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.73.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.74.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.75.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.75.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.76.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.76.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.79.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.79.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.79.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.80.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.80.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.81.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.81.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.81.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.82.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.82.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.82.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.85.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.85.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.85.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.88.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.88.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.89.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.89.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.89.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.5:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.6:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.5:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.5:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.97.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.97.1:::::::*

Credits

Beni Saprulah (HackerOne: https://hackerone.com/bebensap, LinkedIn: https://www.linkedin.com/in/beni-saprulah)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.0.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.0.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.0.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.1.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.2.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.2.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.3.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.3.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.3.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.4.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.5.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.5.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.5.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.6.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.6.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.6.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.7.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.7.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.8.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.9.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.10.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.11.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.12.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.12.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.13.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.14.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.15.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.15.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.15.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.15.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.16.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.16.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.16.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.17.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.17.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.17.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.18.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.18.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.19.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.19.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.20.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.20.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.20.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.20.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.21.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.21.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.21.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.22.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.22.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.23.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.24.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.24.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.25.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.25.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.26.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.26.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.27.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.28.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.28.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.29.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.29.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.29.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.30.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.30.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.31.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.31.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.32.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.32.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.33.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.33.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.34.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.34.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.35.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.36.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.38.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.38.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.39.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.40.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.40.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.41.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.41.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.42.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.43.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.44.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.45.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.45.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.46.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.47.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.47.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.48.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.49.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.50.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.51.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.52.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.53.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.53.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.54.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.54.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.55.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.56.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.57.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.57.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.58.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.58.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.59.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.60.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.61.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.62.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.63.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.64.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.65.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.66.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.67.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.67.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.68.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.68.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.69.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.71.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.72.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.73.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.74.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.75.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.75.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.76.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.76.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.79.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.79.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.79.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.80.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.80.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.81.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.81.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.81.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.82.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.82.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.82.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.85.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.85.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.85.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.88.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.88.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.89.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.89.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.89.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.6:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.97.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.97.1:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "Nexus Repository 3",
          "vendor": "Sonatype",
          "versions": [
            {
              "lessThan": "3.98.0",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Beni Saprulah (HackerOne: https://hackerone.com/bebensap, LinkedIn: https://www.linkedin.com/in/beni-saprulah)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eSonatype Nexus Repository 3 does not check that a user account is authorized to access a repository before the repository is added as a member of a group repository. A user account that has signed in with valid credentials and holds the add or edit privilege on a group repository can add a repository that the account cannot read or browse, and then read the content of that repository through the group. The anonymous user can only do this if an administrator has explicitly granted it that privilege.\u003c/p\u003e"
            }
          ],
          "value": "Sonatype Nexus Repository 3 does not check that a user account is authorized to access a repository before the repository is added as a member of a group repository. A user account that has signed in with valid credentials and holds the add or edit privilege on a group repository can add a repository that the account cannot read or browse, and then read the content of that repository through the group. The anonymous user can only do this if an administrator has explicitly granted it that privilege."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-862",
              "description": "CWE-862 Missing Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-04T20:01:20.764Z",
        "orgId": "103e4ec9-0a87-450b-af77-479448ddef11",
        "shortName": "Sonatype"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://help.sonatype.com/en/sonatype-nexus-repository-3-98-0-release-notes.html"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://support.sonatype.com/hc/en-us/articles/56599581299987/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Nexus Repository 3 - Group Repository Member Authorization Bypass",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "103e4ec9-0a87-450b-af77-479448ddef11",
    "assignerShortName": "Sonatype",
    "cveId": "CVE-2026-113368",
    "datePublished": "2026-11-04T20:01:20.764Z",
    "dateReserved": "2026-10-20T01:54:48.995Z",
    "dateUpdated": "2026-11-04T20:01:20.764Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-97712 (GCVE-0-2026-97712)

Vulnerability from nvd – Published: 2026-10-15 15:34 – Updated: 2026-10-16 03:56

Title

Nexus Repository 3 - Privilege Escalation via Role Management

Summary

Sonatype Nexus Repository 3 allows a user that holds the role create or role update permission to grant roles and privileges that the account does not hold. This can give the user more access than intended, up to full administrative access.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-15 00:00 UTC

CWE

CWE-862 - Missing Authorization

Assigner

Sonatype CNA under the mitre root

CNA scorecard B 90/100 over 35 records in the last 180 days details

References

2 references

URL	Tags
https://help.sonatype.com/en/sonatype-nexus-repos…	patch
https://support.sonatype.com/hc/en-us/articles/56…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Sonatype	Nexus Repository 3	Affected: 3.0.0 , < 3.97.0 (semver) cpe:2.3:a:sonatype:nexus_repository_manager:3.0.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.0.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.0.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.1.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.2.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.2.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.3.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.3.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.3.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.4.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.5.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.5.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.5.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.6.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.6.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.6.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.7.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.7.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.8.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.9.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.10.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.11.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.12.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.12.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.13.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.14.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.15.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.15.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.15.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.15.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.16.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.16.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.16.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.17.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.17.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.17.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.18.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.18.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.19.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.19.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.20.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.20.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.20.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.20.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.21.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.21.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.21.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.22.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.22.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.23.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.24.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.24.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.25.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.25.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.26.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.26.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.27.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.28.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.28.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.29.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.29.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.29.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.30.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.30.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.31.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.31.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.32.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.32.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.33.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.33.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.34.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.34.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.35.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.36.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.38.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.38.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.39.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.40.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.40.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.41.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.41.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.42.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.43.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.44.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.45.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.45.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.46.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.47.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.47.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.48.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.49.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.50.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.51.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.52.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.53.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.53.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.54.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.54.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.55.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.56.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.57.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.57.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.58.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.58.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.59.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.60.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.61.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.62.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.63.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.64.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.65.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.66.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.67.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.67.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.68.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.68.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.69.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.71.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.72.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.73.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.74.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.75.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.75.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.76.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.76.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.79.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.79.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.80.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.81.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.81.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.82.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.82.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.85.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.85.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.88.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.88.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.89.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.89.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.5:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.4:::::::*

Credits

Beni Saprulah (HackerOne: https://hackerone.com/bebensap, LinkedIn: https://www.linkedin.com/in/beni-saprulah)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-97712",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-15T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-16T03:56:56.472Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.0.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.0.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.0.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.1.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.2.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.2.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.3.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.3.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.3.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.4.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.5.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.5.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.5.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.6.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.6.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.6.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.7.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.7.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.8.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.9.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.10.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.11.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.12.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.12.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.13.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.14.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.15.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.15.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.15.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.15.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.16.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.16.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.16.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.17.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.17.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.17.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.18.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.18.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.19.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.19.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.20.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.20.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.20.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.20.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.21.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.21.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.21.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.22.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.22.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.23.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.24.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.24.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.25.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.25.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.26.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.26.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.27.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.28.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.28.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.29.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.29.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.29.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.30.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.30.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.31.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.31.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.32.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.32.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.33.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.33.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.34.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.34.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.35.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.36.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.38.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.38.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.39.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.40.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.40.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.41.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.41.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.42.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.43.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.44.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.45.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.45.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.46.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.47.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.47.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.48.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.49.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.50.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.51.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.52.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.53.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.53.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.54.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.54.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.55.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.56.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.57.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.57.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.58.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.58.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.59.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.60.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.61.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.62.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.63.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.64.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.65.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.66.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.67.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.67.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.68.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.68.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.69.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.71.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.72.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.73.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.74.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.75.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.75.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.76.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.76.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.79.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.79.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.80.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.81.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.81.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.82.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.82.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.85.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.85.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.88.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.88.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.89.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.89.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.4:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "Nexus Repository 3",
          "vendor": "Sonatype",
          "versions": [
            {
              "lessThan": "3.97.0",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Beni Saprulah (HackerOne: https://hackerone.com/bebensap, LinkedIn: https://www.linkedin.com/in/beni-saprulah)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eSonatype Nexus Repository 3 allows a user that holds the role create or role update permission to grant roles and privileges that the account does not hold. This can give the user more access than intended, up to full administrative access.\u003c/p\u003e"
            }
          ],
          "value": "Sonatype Nexus Repository 3 allows a user that holds the role create or role update permission to grant roles and privileges that the account does not hold. This can give the user more access than intended, up to full administrative access."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-862",
              "description": "CWE-862 Missing Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-15T15:34:40.948Z",
        "orgId": "103e4ec9-0a87-450b-af77-479448ddef11",
        "shortName": "Sonatype"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://help.sonatype.com/en/sonatype-nexus-repository-3-97-0-release-notes.html"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://support.sonatype.com/hc/en-us/articles/56207076233619/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Nexus Repository 3 - Privilege Escalation via Role Management",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "103e4ec9-0a87-450b-af77-479448ddef11",
    "assignerShortName": "Sonatype",
    "cveId": "CVE-2026-97712",
    "datePublished": "2026-10-15T15:34:40.948Z",
    "dateReserved": "2026-09-24T21:53:06.818Z",
    "dateUpdated": "2026-10-16T03:56:56.472Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-97667 (GCVE-0-2026-97667)

Vulnerability from nvd – Published: 2026-10-15 15:34 – Updated: 2026-10-15 16:10

Title

Nexus Repository 3 - Stored Cross-Site Scripting in Browse UI

Summary

Sonatype Nexus Repository 3 allows a user account that holds the edit permission on a hosted R repository to store script content in the metadata of an uploaded R package. The script runs in the browser of a user who opens the details of that package in the Browse user interface, with the permissions of the viewing user. In this description, a user account means an account that has supplied valid credentials. The anonymous user, if enabled, is also a user account and can hold this permission if an administrator grants it.

Severity

5.1 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-15 16:10 UTC

CWE

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Assigner

Sonatype CNA under the mitre root

CNA scorecard B 90/100 over 35 records in the last 180 days details

References

2 references

URL	Tags
https://help.sonatype.com/en/sonatype-nexus-repos…	patch
https://support.sonatype.com/hc/en-us/articles/56…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Sonatype	Nexus Repository 3	Affected: 3.28.0 , < 3.97.0 (semver) cpe:2.3:a:sonatype:nexus_repository_manager:3.28.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.28.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.29.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.29.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.29.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.30.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.30.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.31.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.31.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.32.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.32.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.33.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.33.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.34.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.34.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.35.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.36.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.38.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.38.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.39.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.40.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.40.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.41.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.41.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.42.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.43.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.44.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.45.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.45.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.46.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.47.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.47.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.48.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.49.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.50.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.51.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.52.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.53.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.53.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.54.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.54.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.55.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.56.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.57.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.57.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.58.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.58.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.59.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.60.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.61.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.62.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.63.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.64.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.65.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.66.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.67.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.67.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.68.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.68.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.69.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.71.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.72.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.73.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.74.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.75.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.75.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.76.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.76.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.79.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.79.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.80.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.81.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.81.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.82.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.82.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.85.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.85.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.88.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.88.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.89.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.89.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.5:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.4:::::::*

Credits

Uttam Sabhadiya

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-97667",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-15T16:10:19.110825Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T16:10:31.406Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.28.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.28.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.29.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.29.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.29.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.30.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.30.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.31.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.31.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.32.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.32.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.33.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.33.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.34.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.34.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.35.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.36.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.38.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.38.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.39.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.40.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.40.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.41.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.41.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.42.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.43.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.44.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.45.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.45.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.46.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.47.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.47.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.48.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.49.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.50.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.51.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.52.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.53.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.53.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.54.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.54.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.55.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.56.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.57.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.57.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.58.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.58.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.59.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.60.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.61.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.62.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.63.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.64.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.65.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.66.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.67.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.67.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.68.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.68.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.69.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.71.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.72.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.73.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.74.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.75.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.75.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.76.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.76.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.79.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.79.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.80.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.81.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.81.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.82.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.82.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.85.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.85.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.88.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.88.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.89.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.89.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.4:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "Nexus Repository 3",
          "vendor": "Sonatype",
          "versions": [
            {
              "lessThan": "3.97.0",
              "status": "affected",
              "version": "3.28.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Uttam Sabhadiya"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eSonatype Nexus Repository 3 allows a user account that holds the edit permission on a hosted R repository to store script content in the metadata of an uploaded R package. The script runs in the browser of a user who opens the details of that package in the Browse user interface, with the permissions of the viewing user. In this description, a user account means an account that has supplied valid credentials. The anonymous user, if enabled, is also a user account and can hold this permission if an administrator grants it.\u003c/p\u003e"
            }
          ],
          "value": "Sonatype Nexus Repository 3 allows a user account that holds the edit permission on a hosted R repository to store script content in the metadata of an uploaded R package. The script runs in the browser of a user who opens the details of that package in the Browse user interface, with the permissions of the viewing user. In this description, a user account means an account that has supplied valid credentials. The anonymous user, if enabled, is also a user account and can hold this permission if an administrator grants it."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "PASSIVE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-15T15:34:40.548Z",
        "orgId": "103e4ec9-0a87-450b-af77-479448ddef11",
        "shortName": "Sonatype"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://help.sonatype.com/en/sonatype-nexus-repository-3-97-0-release-notes.html"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://support.sonatype.com/hc/en-us/articles/56207477462035/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Nexus Repository 3 - Stored Cross-Site Scripting in Browse UI",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "103e4ec9-0a87-450b-af77-479448ddef11",
    "assignerShortName": "Sonatype",
    "cveId": "CVE-2026-97667",
    "datePublished": "2026-10-15T15:34:40.548Z",
    "dateReserved": "2026-09-24T20:12:26.099Z",
    "dateUpdated": "2026-10-15T16:10:31.406Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-97666 (GCVE-0-2026-97666)

Vulnerability from nvd – Published: 2026-10-15 15:34 – Updated: 2026-10-15 16:11

Title

Nexus Repository 3 - Unsafe Reflection in ExtDirect Repository Endpoint

Summary

Sonatype Nexus Repository 3 allows an unauthenticated remote attacker to supply attacker-controlled input to a Java class loading call through an ExtDirect endpoint. This allows the attacker to learn whether specific classes are present in the application. The issue does not by itself allow code execution.

Severity

6.9 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-15 16:11 UTC

CWE

CWE-470 - Use of Externally-Controlled Input to Select Classes or Code ("Unsafe Reflection")

Assigner

Sonatype CNA under the mitre root

CNA scorecard B 90/100 over 35 records in the last 180 days details

References

2 references

URL	Tags
https://help.sonatype.com/en/sonatype-nexus-repos…	patch
https://support.sonatype.com/hc/en-us/articles/56…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Sonatype	Nexus Repository 3	Affected: 3.0.0 , < 3.97.0 (semver) cpe:2.3:a:sonatype:nexus_repository_manager:3.0.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.0.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.0.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.1.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.2.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.2.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.3.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.3.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.3.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.4.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.5.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.5.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.5.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.6.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.6.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.6.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.7.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.7.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.8.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.9.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.10.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.11.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.12.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.12.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.13.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.14.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.15.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.15.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.15.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.16.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.16.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.16.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.17.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.18.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.18.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.19.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.19.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.20.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.20.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.21.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.21.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.21.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.22.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.22.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.23.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.24.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.25.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.25.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.26.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.26.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.27.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.28.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.28.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.29.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.29.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.30.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.30.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.31.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.31.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.32.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.32.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.33.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.33.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.34.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.34.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.35.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.36.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.38.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.38.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.39.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.40.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.40.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.41.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.41.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.42.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.43.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.44.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.45.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.45.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.46.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.47.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.48.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.49.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.50.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.51.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.52.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.53.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.53.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.54.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.54.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.55.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.56.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.57.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.58.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.59.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.60.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.61.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.62.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.63.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.64.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.65.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.66.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.67.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.68.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.68.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.69.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.5:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.71.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.72.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.73.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.74.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.75.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.75.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.76.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.76.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.79.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.79.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.80.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.81.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.81.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.82.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.82.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.85.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.85.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.88.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.89.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.89.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.5:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.4:::::::*

Credits

wupco123

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-97666",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-15T16:11:03.463175Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T16:11:15.158Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.0.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.0.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.0.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.1.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.2.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.2.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.3.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.3.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.3.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.4.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.5.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.5.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.5.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.6.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.6.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.6.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.7.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.7.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.8.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.9.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.10.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.11.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.12.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.12.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.13.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.14.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.15.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.15.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.15.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.16.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.16.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.16.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.17.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.18.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.18.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.19.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.19.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.20.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.20.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.21.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.21.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.21.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.22.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.22.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.23.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.24.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.25.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.25.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.26.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.26.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.27.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.28.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.28.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.29.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.29.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.30.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.30.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.31.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.31.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.32.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.32.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.33.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.33.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.34.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.34.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.35.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.36.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.38.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.38.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.39.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.40.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.40.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.41.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.41.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.42.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.43.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.44.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.45.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.45.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.46.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.47.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.48.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.49.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.50.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.51.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.52.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.53.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.53.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.54.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.54.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.55.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.56.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.57.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.58.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.59.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.60.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.61.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.62.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.63.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.64.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.65.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.66.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.67.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.68.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.68.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.69.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.71.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.72.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.73.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.74.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.75.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.75.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.76.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.76.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.79.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.79.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.80.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.81.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.81.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.82.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.82.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.85.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.85.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.88.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.89.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.89.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.4:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "Nexus Repository 3",
          "vendor": "Sonatype",
          "versions": [
            {
              "lessThan": "3.97.0",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "wupco123"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eSonatype Nexus Repository 3 allows an unauthenticated remote attacker to supply attacker-controlled input to a Java class loading call through an ExtDirect endpoint. This allows the attacker to learn whether specific classes are present in the application. The issue does not by itself allow code execution.\u003c/p\u003e"
            }
          ],
          "value": "Sonatype Nexus Repository 3 allows an unauthenticated remote attacker to supply attacker-controlled input to a Java class loading call through an ExtDirect endpoint. This allows the attacker to learn whether specific classes are present in the application. The issue does not by itself allow code execution."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-470",
              "description": "CWE-470 Use of Externally-Controlled Input to Select Classes or Code (\"Unsafe Reflection\")",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-15T15:34:40.295Z",
        "orgId": "103e4ec9-0a87-450b-af77-479448ddef11",
        "shortName": "Sonatype"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://help.sonatype.com/en/sonatype-nexus-repository-3-97-0-release-notes.html"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://support.sonatype.com/hc/en-us/articles/56206649520147/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Nexus Repository 3 - Unsafe Reflection in ExtDirect Repository Endpoint",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "103e4ec9-0a87-450b-af77-479448ddef11",
    "assignerShortName": "Sonatype",
    "cveId": "CVE-2026-97666",
    "datePublished": "2026-10-15T15:34:40.295Z",
    "dateReserved": "2026-09-24T20:12:25.471Z",
    "dateUpdated": "2026-10-15T16:11:15.158Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-97665 (GCVE-0-2026-97665)

Vulnerability from nvd – Published: 2026-10-15 15:34 – Updated: 2026-10-15 16:11

Title

Nexus Repository 3 - Missing Authorization on NuGet Symbol Package Upload

Summary

A missing authorization check in Nexus Repository 3's NuGet Components API upload path allows an account holding only repository read and browse privileges to upload and persist NuGet symbol packages (.snupkg) to a hosted repository, bypassing the write-permission check enforced for ordinary package uploads. Exploitation requires a hosted NuGet repository with Symbol Server enabled. If anonymous access is enabled, the built-in anonymous user holds read and browse privileges across all repositories by default, so this precondition can also be met without an authenticated account.

Severity

7.1 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-15 16:11 UTC

CWE

CWE-862 - Missing Authorization

Assigner

Sonatype CNA under the mitre root

CNA scorecard B 90/100 over 35 records in the last 180 days details

References

2 references

URL	Tags
https://help.sonatype.com/en/sonatype-nexus-repos…	patch
https://support.sonatype.com/hc/en-us/articles/55…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Sonatype	Nexus Repository 3	Affected: 3.95.0 , < 3.97.0 (semver) cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.3:::::::*

Credits

wupco123

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-97665",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-15T16:11:27.450391Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T16:11:49.937Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.3:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "Nexus Repository 3",
          "vendor": "Sonatype",
          "versions": [
            {
              "lessThan": "3.97.0",
              "status": "affected",
              "version": "3.95.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "wupco123"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eA missing authorization check in Nexus Repository 3\u0027s NuGet Components API upload path allows an account holding only repository \u003ccode\u003eread\u003c/code\u003e and \u003ccode\u003ebrowse\u003c/code\u003e privileges to upload and persist NuGet symbol packages (\u003ccode\u003e.snupkg\u003c/code\u003e) to a hosted repository, bypassing the write-permission check enforced for ordinary package uploads. Exploitation requires a hosted NuGet repository with Symbol Server enabled. If anonymous access is enabled, the built-in anonymous user holds \u003ccode\u003eread\u003c/code\u003e and \u003ccode\u003ebrowse\u003c/code\u003e privileges across all repositories by default, so this precondition can also be met without an authenticated account.\u003c/p\u003e"
            }
          ],
          "value": "A missing authorization check in Nexus Repository 3\u0027s NuGet Components API upload path allows an account holding only repository read and browse privileges to upload and persist NuGet symbol packages (.snupkg) to a hosted repository, bypassing the write-permission check enforced for ordinary package uploads. Exploitation requires a hosted NuGet repository with Symbol Server enabled. If anonymous access is enabled, the built-in anonymous user holds read and browse privileges across all repositories by default, so this precondition can also be met without an authenticated account."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-862",
              "description": "CWE-862 Missing Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-15T15:34:40.047Z",
        "orgId": "103e4ec9-0a87-450b-af77-479448ddef11",
        "shortName": "Sonatype"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://help.sonatype.com/en/sonatype-nexus-repository-3-97-0-release-notes.html"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://support.sonatype.com/hc/en-us/articles/55793090807827/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Nexus Repository 3 - Missing Authorization on NuGet Symbol Package Upload",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "103e4ec9-0a87-450b-af77-479448ddef11",
    "assignerShortName": "Sonatype",
    "cveId": "CVE-2026-97665",
    "datePublished": "2026-10-15T15:34:40.047Z",
    "dateReserved": "2026-09-24T20:12:24.836Z",
    "dateUpdated": "2026-10-15T16:11:49.937Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-77125 (GCVE-0-2026-77125)

Vulnerability from nvd – Published: 2026-09-02 17:03 – Updated: 2026-09-02 18:01

Title

Nexus Repository 3 - Incorrect Authorization on Blobstore Group Endpoints

Summary

A vulnerability was identified in Sonatype Nexus Repository 3 in which two blobstore group management REST API endpoints did not correctly enforce the intended authorization check. A user granted only the nexus:blobstores:create permission could invoke these endpoints to convert an existing blobstore into a group blobstore, an action that should require the nexus:blobstores:update permission instead. This could result in unauthorized modification of blobstore configuration without administrator approval. The nexus:blobstores:create permission is a named permission that must be explicitly granted by an administrator; it is not held by default.

Severity

7.1 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-02 17:56 UTC

CWE

CWE-863 - Incorrect Authorization

Assigner

Sonatype CNA under the mitre root

CNA scorecard B 90/100 over 35 records in the last 180 days details

References

2 references

URL	Tags
https://help.sonatype.com/en/sonatype-nexus-repos…	patch
https://support.sonatype.com/hc/en-us/articles/54…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Sonatype	Nexus Repository 3	Affected: 3.19.0 , < 3.96.0 (semver) cpe:2.3:a:sonatype:nexus_repository_manager:3.19.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.19.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.20.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.20.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.20.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.20.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.21.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.21.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.21.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.22.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.22.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.23.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.24.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.24.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.25.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.25.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.26.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.26.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.27.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.28.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.28.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.29.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.29.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.29.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.30.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.30.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.31.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.31.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.32.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.32.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.33.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.33.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.34.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.34.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.35.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.36.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.38.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.38.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.39.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.40.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.40.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.41.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.41.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.42.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.43.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.44.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.45.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.45.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.46.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.47.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.47.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.48.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.49.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.50.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.51.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.52.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.53.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.53.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.54.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.54.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.55.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.56.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.57.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.57.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.58.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.58.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.59.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.60.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.61.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.62.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.63.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.64.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.65.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.66.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.67.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.67.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.68.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.68.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.69.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.71.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.72.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.73.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.74.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.75.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.75.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.76.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.76.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.79.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.79.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.80.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.81.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.81.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.82.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.82.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.85.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.85.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.88.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.88.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.89.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.89.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.5:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:::::::*

Credits

Mayur Udiniya aka roughwire (https://x.com/roughwire/)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-77125",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-02T17:56:01.354547Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-02T18:01:37.243Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.19.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.19.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.20.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.20.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.20.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.20.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.21.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.21.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.21.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.22.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.22.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.23.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.24.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.24.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.25.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.25.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.26.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.26.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.27.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.28.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.28.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.29.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.29.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.29.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.30.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.30.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.31.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.31.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.32.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.32.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.33.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.33.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.34.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.34.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.35.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.36.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.38.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.38.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.39.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.40.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.40.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.41.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.41.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.42.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.43.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.44.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.45.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.45.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.46.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.47.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.47.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.48.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.49.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.50.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.51.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.52.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.53.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.53.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.54.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.54.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.55.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.56.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.57.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.57.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.58.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.58.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.59.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.60.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.61.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.62.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.63.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.64.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.65.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.66.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.67.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.67.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.68.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.68.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.69.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.71.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.72.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.73.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.74.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.75.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.75.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.76.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.76.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.79.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.79.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.80.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.81.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.81.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.82.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.82.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.85.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.85.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.88.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.88.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.89.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.89.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "Nexus Repository 3",
          "vendor": "Sonatype",
          "versions": [
            {
              "lessThan": "3.96.0",
              "status": "affected",
              "version": "3.19.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Mayur Udiniya aka roughwire (https://x.com/roughwire/)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eA vulnerability was identified in Sonatype Nexus Repository 3 in which two blobstore group management REST API endpoints did not correctly enforce the intended authorization check. A user granted only the \u003ccode\u003enexus:blobstores:create\u003c/code\u003e permission could invoke these endpoints to convert an existing blobstore into a group blobstore, an action that should require the \u003ccode\u003enexus:blobstores:update\u003c/code\u003e permission instead. This could result in unauthorized modification of blobstore configuration without administrator approval. The \u003ccode\u003enexus:blobstores:create\u003c/code\u003e permission is a named permission that must be explicitly granted by an administrator; it is not held by default.\u003c/p\u003e"
            }
          ],
          "value": "A vulnerability was identified in Sonatype Nexus Repository 3 in which two blobstore group management REST API endpoints did not correctly enforce the intended authorization check. A user granted only the nexus:blobstores:create permission could invoke these endpoints to convert an existing blobstore into a group blobstore, an action that should require the nexus:blobstores:update permission instead. This could result in unauthorized modification of blobstore configuration without administrator approval. The nexus:blobstores:create permission is a named permission that must be explicitly granted by an administrator; it is not held by default."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-863",
              "description": "CWE-863 Incorrect Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-02T17:03:25.295Z",
        "orgId": "103e4ec9-0a87-450b-af77-479448ddef11",
        "shortName": "Sonatype"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://help.sonatype.com/en/sonatype-nexus-repository-3-96-0-release-notes.html"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://support.sonatype.com/hc/en-us/articles/54643114434451/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Nexus Repository 3 - Incorrect Authorization on Blobstore Group Endpoints",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "103e4ec9-0a87-450b-af77-479448ddef11",
    "assignerShortName": "Sonatype",
    "cveId": "CVE-2026-77125",
    "datePublished": "2026-09-02T17:03:25.295Z",
    "dateReserved": "2026-08-20T13:00:27.728Z",
    "dateUpdated": "2026-09-02T18:01:37.243Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-77124 (GCVE-0-2026-77124)

Vulnerability from nvd – Published: 2026-09-02 17:03 – Updated: 2026-09-02 17:55

Title

Nexus Repository 3 - Script Execution Disable Setting Not Enforced

Summary

In affected versions of Nexus Repository 3, the script execution endpoint (POST /service/rest/v1/script/{name}/run) did not verify whether script execution had been administratively disabled. An account holding script-execution permission could continue to run previously-created scripts even after an administrator set nexus.scripts.allowCreation=false, undermining the expectation that this setting fully blocks script execution.

Severity

7.5 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-02 17:55 UTC

CWE

CWE-184 - Incomplete List of Disallowed Inputs

Assigner

Sonatype CNA under the mitre root

CNA scorecard B 90/100 over 35 records in the last 180 days details

References

2 references

URL	Tags
https://help.sonatype.com/en/sonatype-nexus-repos…	patch
https://support.sonatype.com/hc/en-us/articles/54…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Sonatype	Nexus Repository 3	Affected: 3.21.2 , < 3.96.0 (semver) cpe:2.3:a:sonatype:nexus_repository_manager:3.21.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.22.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.22.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.23.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.24.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.24.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.25.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.25.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.26.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.26.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.27.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.28.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.28.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.29.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.29.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.29.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.30.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.30.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.31.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.31.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.32.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.32.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.33.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.33.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.34.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.34.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.35.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.36.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.38.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.38.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.39.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.40.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.40.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.41.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.41.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.42.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.43.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.44.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.45.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.45.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.46.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.47.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.47.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.48.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.49.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.50.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.51.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.52.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.53.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.53.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.54.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.54.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.55.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.56.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.57.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.57.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.58.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.58.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.59.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.60.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.61.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.62.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.63.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.64.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.65.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.66.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.67.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.67.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.68.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.68.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.69.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.71.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.72.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.73.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.74.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.75.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.75.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.76.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.76.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.79.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.79.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.80.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.81.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.81.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.82.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.82.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.85.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.85.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.88.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.88.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.89.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.89.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.5:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:::::::*

Credits

Yousif (s3c_krd)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-77124",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-02T17:55:31.442832Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-02T17:55:38.934Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.21.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.22.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.22.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.23.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.24.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.24.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.25.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.25.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.26.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.26.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.27.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.28.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.28.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.29.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.29.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.29.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.30.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.30.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.31.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.31.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.32.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.32.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.33.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.33.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.34.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.34.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.35.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.36.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.38.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.38.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.39.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.40.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.40.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.41.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.41.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.42.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.43.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.44.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.45.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.45.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.46.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.47.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.47.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.48.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.49.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.50.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.51.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.52.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.53.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.53.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.54.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.54.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.55.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.56.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.57.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.57.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.58.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.58.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.59.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.60.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.61.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.62.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.63.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.64.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.65.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.66.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.67.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.67.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.68.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.68.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.69.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.71.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.72.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.73.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.74.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.75.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.75.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.76.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.76.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.79.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.79.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.80.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.81.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.81.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.82.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.82.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.85.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.85.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.88.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.88.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.89.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.89.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "Nexus Repository 3",
          "vendor": "Sonatype",
          "versions": [
            {
              "lessThan": "3.96.0",
              "status": "affected",
              "version": "3.21.2",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Yousif (s3c_krd)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIn affected versions of Nexus Repository 3, the script execution endpoint (\u003ccode\u003ePOST /service/rest/v1/script/{name}/run\u003c/code\u003e) did not verify whether script execution had been administratively disabled. An account holding script-execution permission could continue to run previously-created scripts even after an administrator set \u003ccode\u003enexus.scripts.allowCreation=false\u003c/code\u003e, undermining the expectation that this setting fully blocks script execution.\u003c/p\u003e"
            }
          ],
          "value": "In affected versions of Nexus Repository 3, the script execution endpoint (POST /service/rest/v1/script/{name}/run) did not verify whether script execution had been administratively disabled. An account holding script-execution permission could continue to run previously-created scripts even after an administrator set nexus.scripts.allowCreation=false, undermining the expectation that this setting fully blocks script execution."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "HIGH",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-184",
              "description": "CWE-184 Incomplete List of Disallowed Inputs",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-02T17:03:25.512Z",
        "orgId": "103e4ec9-0a87-450b-af77-479448ddef11",
        "shortName": "Sonatype"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://help.sonatype.com/en/sonatype-nexus-repository-3-96-0-release-notes.html"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://support.sonatype.com/hc/en-us/articles/54641528273811/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Nexus Repository 3 - Script Execution Disable Setting Not Enforced",
      "x_generator": {
        "engine": "Vulnogram 1.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "103e4ec9-0a87-450b-af77-479448ddef11",
    "assignerShortName": "Sonatype",
    "cveId": "CVE-2026-77124",
    "datePublished": "2026-09-02T17:03:25.512Z",
    "dateReserved": "2026-08-20T13:00:26.923Z",
    "dateUpdated": "2026-09-02T17:55:38.934Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-77123 (GCVE-0-2026-77123)

Vulnerability from nvd – Published: 2026-09-02 17:03 – Updated: 2026-09-02 17:53

Title

Nexus Repository 3 - Webhook Secret Disclosure via Capability Read API

Summary

Nexus Repository 3 contains a sensitive information disclosure vulnerability in the capability read API. An account holding the nexus:capabilities:read privilege can retrieve the plaintext shared secret configured on a webhook capability, which is intended to be masked from all API responses. This issue affects Nexus Repository 3 versions 3.2.0 through 3.95.x, and is fixed in version 3.96.0.

Severity

6 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-02 17:49 UTC

CWE

CWE-201 - Insertion of Sensitive Information Into Sent Data

Assigner

Sonatype CNA under the mitre root

CNA scorecard B 90/100 over 35 records in the last 180 days details

References

2 references

URL	Tags
https://help.sonatype.com/en/sonatype-nexus-repos…	patch
https://support.sonatype.com/hc/en-us/articles/54…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Sonatype	Nexus Repository 3	Affected: 3.2.0 , < 3.96.0 (semver) cpe:2.3:a:sonatype:nexus_repository_manager:3.2.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.2.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.3.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.3.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.3.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.4.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.5.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.5.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.5.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.6.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.6.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.6.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.7.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.7.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.8.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.9.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.10.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.11.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.12.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.12.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.13.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.14.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.15.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.15.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.15.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.16.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.16.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.16.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.17.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.18.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.18.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.19.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.19.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.20.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.20.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.21.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.21.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.21.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.22.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.22.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.23.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.24.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.25.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.25.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.26.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.26.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.27.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.28.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.28.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.29.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.29.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.30.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.30.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.31.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.31.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.32.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.32.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.33.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.33.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.34.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.34.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.35.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.36.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.38.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.38.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.39.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.40.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.40.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.41.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.41.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.42.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.43.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.44.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.45.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.45.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.46.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.47.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.48.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.49.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.50.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.51.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.52.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.53.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.53.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.54.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.54.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.55.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.56.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.57.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.58.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.59.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.60.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.61.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.62.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.63.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.64.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.65.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.66.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.67.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.68.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.68.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.69.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.5:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.71.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.72.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.73.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.74.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.75.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.75.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.76.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.76.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.79.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.79.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.80.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.81.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.81.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.82.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.82.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.85.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.85.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.88.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.89.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.89.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.5:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:::::::*

Credits

Beni Saprulah (HackerOne: https://hackerone.com/bebensap, LinkedIn: https://www.linkedin.com/in/beni-saprulah)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-77123",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-02T17:49:51.852604Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-02T17:53:14.784Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.2.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.2.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.3.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.3.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.3.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.4.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.5.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.5.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.5.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.6.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.6.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.6.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.7.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.7.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.8.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.9.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.10.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.11.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.12.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.12.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.13.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.14.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.15.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.15.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.15.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.16.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.16.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.16.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.17.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.18.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.18.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.19.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.19.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.20.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.20.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.21.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.21.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.21.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.22.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.22.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.23.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.24.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.25.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.25.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.26.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.26.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.27.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.28.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.28.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.29.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.29.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.30.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.30.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.31.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.31.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.32.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.32.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.33.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.33.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.34.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.34.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.35.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.36.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.38.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.38.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.39.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.40.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.40.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.41.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.41.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.42.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.43.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.44.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.45.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.45.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.46.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.47.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.48.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.49.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.50.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.51.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.52.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.53.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.53.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.54.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.54.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.55.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.56.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.57.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.58.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.59.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.60.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.61.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.62.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.63.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.64.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.65.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.66.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.67.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.68.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.68.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.69.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.71.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.72.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.73.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.74.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.75.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.75.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.76.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.76.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.79.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.79.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.80.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.81.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.81.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.82.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.82.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.85.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.85.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.88.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.89.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.89.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "Nexus Repository 3",
          "vendor": "Sonatype",
          "versions": [
            {
              "lessThan": "3.96.0",
              "status": "affected",
              "version": "3.2.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Beni Saprulah (HackerOne: https://hackerone.com/bebensap, LinkedIn: https://www.linkedin.com/in/beni-saprulah)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eNexus Repository 3 contains a sensitive information disclosure vulnerability in the capability read API. An account holding the \u003ccode\u003enexus:capabilities:read\u003c/code\u003e privilege can retrieve the plaintext shared secret configured on a webhook capability, which is intended to be masked from all API responses. This issue affects Nexus Repository 3 versions 3.2.0 through 3.95.x, and is fixed in version 3.96.0.\u003c/p\u003e"
            }
          ],
          "value": "Nexus Repository 3 contains a sensitive information disclosure vulnerability in the capability read API. An account holding the nexus:capabilities:read privilege can retrieve the plaintext shared secret configured on a webhook capability, which is intended to be masked from all API responses. This issue affects Nexus Repository 3 versions 3.2.0 through 3.95.x, and is fixed in version 3.96.0."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-201",
              "description": "CWE-201 Insertion of Sensitive Information Into Sent Data",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-02T17:03:25.742Z",
        "orgId": "103e4ec9-0a87-450b-af77-479448ddef11",
        "shortName": "Sonatype"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://help.sonatype.com/en/sonatype-nexus-repository-3-96-0-release-notes.html"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://support.sonatype.com/hc/en-us/articles/54639904174099/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Nexus Repository 3 - Webhook Secret Disclosure via Capability Read API",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "103e4ec9-0a87-450b-af77-479448ddef11",
    "assignerShortName": "Sonatype",
    "cveId": "CVE-2026-77123",
    "datePublished": "2026-09-02T17:03:25.742Z",
    "dateReserved": "2026-08-20T13:00:26.092Z",
    "dateUpdated": "2026-09-02T17:53:14.784Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-77122 (GCVE-0-2026-77122)

Vulnerability from nvd – Published: 2026-09-02 17:03 – Updated: 2026-09-02 17:47

Title

Nexus Repository 3 - Incorrect Authorization Allows Disclosure of Member Repository Metadata via Group Repository Permissions

Summary

An authorization flaw in the REST API repository details endpoint (GET /service/rest/v1/repositories/{repositoryName}) in Sonatype Nexus Repository 3 allowed an account holding read or browse permission on a group repository to retrieve metadata for member repositories on which it held no direct permission, by requesting the endpoint directly for the member repository name. For proxy repositories, the disclosed metadata includes the configured remote URL, which may reveal internal upstream hostnames. This includes the anonymous user if it has been granted this permission; whether the anonymous user holds this permission depends on the role and permission configuration of the specific installation.

Severity

5.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-02 17:45 UTC

CWE

CWE-863 - Incorrect Authorization

Assigner

Sonatype CNA under the mitre root

CNA scorecard B 90/100 over 35 records in the last 180 days details

References

2 references

URL	Tags
https://help.sonatype.com/en/sonatype-nexus-repos…	patch
https://support.sonatype.com/hc/en-us/articles/54…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Sonatype	Nexus Repository 3	Affected: 3.38.0 , < 3.96.0 (semver) cpe:2.3:a:sonatype:nexus_repository_manager:3.38.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.38.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.39.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.40.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.40.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.41.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.41.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.42.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.43.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.44.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.45.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.45.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.46.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.47.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.48.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.49.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.50.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.51.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.52.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.53.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.53.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.54.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.54.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.55.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.56.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.57.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.58.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.59.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.60.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.61.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.62.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.63.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.64.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.65.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.66.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.67.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.68.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.68.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.69.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.5:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.71.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.72.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.73.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.74.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.75.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.75.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.76.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.76.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.79.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.79.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.80.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.81.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.81.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.82.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.82.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.85.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.85.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.88.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.89.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.89.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.5:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:::::::*

Credits

Yousif (s3c_krd)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-77122",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-02T17:45:31.470694Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-02T17:47:07.777Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.38.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.38.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.39.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.40.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.40.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.41.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.41.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.42.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.43.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.44.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.45.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.45.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.46.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.47.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.48.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.49.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.50.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.51.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.52.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.53.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.53.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.54.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.54.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.55.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.56.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.57.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.58.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.59.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.60.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.61.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.62.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.63.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.64.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.65.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.66.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.67.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.68.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.68.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.69.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.71.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.72.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.73.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.74.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.75.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.75.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.76.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.76.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.79.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.79.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.80.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.81.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.81.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.82.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.82.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.85.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.85.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.88.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.89.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.89.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "Nexus Repository 3",
          "vendor": "Sonatype",
          "versions": [
            {
              "lessThan": "3.96.0",
              "status": "affected",
              "version": "3.38.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Yousif (s3c_krd)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eAn authorization flaw in the REST API repository details endpoint (\u003ccode\u003eGET /service/rest/v1/repositories/{repositoryName}\u003c/code\u003e) in Sonatype Nexus Repository 3 allowed an account holding read or browse permission on a group repository to retrieve metadata for member repositories on which it held no direct permission, by requesting the endpoint directly for the member repository name. For proxy repositories, the disclosed metadata includes the configured remote URL, which may reveal internal upstream hostnames. This includes the anonymous user if it has been granted this permission; whether the anonymous user holds this permission depends on the role and permission configuration of the specific installation.\u003c/p\u003e"
            }
          ],
          "value": "An authorization flaw in the REST API repository details endpoint (GET /service/rest/v1/repositories/{repositoryName}) in Sonatype Nexus Repository 3 allowed an account holding read or browse permission on a group repository to retrieve metadata for member repositories on which it held no direct permission, by requesting the endpoint directly for the member repository name. For proxy repositories, the disclosed metadata includes the configured remote URL, which may reveal internal upstream hostnames. This includes the anonymous user if it has been granted this permission; whether the anonymous user holds this permission depends on the role and permission configuration of the specific installation."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-863",
              "description": "CWE-863 Incorrect Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-02T17:03:25.960Z",
        "orgId": "103e4ec9-0a87-450b-af77-479448ddef11",
        "shortName": "Sonatype"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://help.sonatype.com/en/sonatype-nexus-repository-3-96-0-release-notes.html"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://support.sonatype.com/hc/en-us/articles/54637328224019/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Nexus Repository 3 - Incorrect Authorization Allows Disclosure of Member Repository Metadata via Group Repository Permissions",
      "x_generator": {
        "engine": "Vulnogram 1.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "103e4ec9-0a87-450b-af77-479448ddef11",
    "assignerShortName": "Sonatype",
    "cveId": "CVE-2026-77122",
    "datePublished": "2026-09-02T17:03:25.960Z",
    "dateReserved": "2026-08-20T13:00:25.162Z",
    "dateUpdated": "2026-09-02T17:47:07.777Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-77121 (GCVE-0-2026-77121)

Vulnerability from nvd – Published: 2026-09-02 17:03 – Updated: 2026-09-02 17:42

Title

Nexus Repository 3 - Denial of Service via Unbounded Maven POM Metadata Fields

Summary

A user account with permission to deploy artifacts to a hosted Maven repository could upload a POM file containing an oversized metadata field. This causes future attempts to list or browse that repository's components to permanently fail until an administrator repairs the underlying data. Only the targeted repository is affected; other repositories and overall server health remain unaffected.

Severity

5.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-02 17:42 UTC

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

Sonatype CNA under the mitre root

CNA scorecard B 90/100 over 35 records in the last 180 days details

References

2 references

URL	Tags
https://help.sonatype.com/en/sonatype-nexus-repos…	patch
https://support.sonatype.com/hc/en-us/articles/54…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Sonatype	Nexus Repository 3	Affected: 3.26.0 , < 3.95.0 (semver) cpe:2.3:a:sonatype:nexus_repository_manager:3.26.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.26.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.27.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.28.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.28.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.29.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.29.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.29.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.30.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.30.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.31.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.31.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.32.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.32.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.33.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.33.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.34.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.34.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.35.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.36.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.38.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.38.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.39.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.40.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.40.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.41.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.41.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.42.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.43.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.44.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.45.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.45.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.46.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.47.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.47.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.48.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.49.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.50.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.51.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.52.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.53.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.53.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.54.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.54.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.55.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.56.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.57.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.57.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.58.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.58.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.59.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.60.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.61.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.62.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.63.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.64.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.65.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.66.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.67.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.67.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.68.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.68.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.69.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.71.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.72.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.73.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.74.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.75.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.75.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.76.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.76.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.79.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.79.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.80.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.81.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.81.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.82.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.82.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.85.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.85.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.88.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.88.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.89.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.89.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.5:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:::::::*

Credits

e0x1337 (elite)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-77121",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-02T17:42:33.557222Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-02T17:42:57.776Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.26.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.26.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.27.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.28.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.28.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.29.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.29.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.29.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.30.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.30.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.31.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.31.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.32.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.32.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.33.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.33.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.34.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.34.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.35.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.36.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.38.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.38.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.39.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.40.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.40.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.41.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.41.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.42.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.43.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.44.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.45.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.45.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.46.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.47.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.47.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.48.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.49.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.50.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.51.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.52.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.53.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.53.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.54.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.54.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.55.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.56.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.57.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.57.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.58.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.58.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.59.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.60.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.61.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.62.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.63.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.64.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.65.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.66.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.67.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.67.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.68.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.68.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.69.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.71.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.72.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.73.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.74.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.75.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.75.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.76.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.76.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.79.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.79.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.80.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.81.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.81.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.82.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.82.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.85.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.85.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.88.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.88.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.89.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.89.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "Nexus Repository 3",
          "vendor": "Sonatype",
          "versions": [
            {
              "lessThan": "3.95.0",
              "status": "affected",
              "version": "3.26.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "e0x1337 (elite)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eA user account with permission to deploy artifacts to a hosted Maven repository could upload a POM file containing an oversized metadata field. This causes future attempts to list or browse that repository\u0027s components to permanently fail until an administrator repairs the underlying data. Only the targeted repository is affected; other repositories and overall server health remain unaffected.\u003c/p\u003e"
            }
          ],
          "value": "A user account with permission to deploy artifacts to a hosted Maven repository could upload a POM file containing an oversized metadata field. This causes future attempts to list or browse that repository\u0027s components to permanently fail until an administrator repairs the underlying data. Only the targeted repository is affected; other repositories and overall server health remain unaffected."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-02T17:03:26.186Z",
        "orgId": "103e4ec9-0a87-450b-af77-479448ddef11",
        "shortName": "Sonatype"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://help.sonatype.com/en/sonatype-nexus-repository-3-95-0-release-notes.html"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://support.sonatype.com/hc/en-us/articles/54635665756691/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Nexus Repository 3 - Denial of Service via Unbounded Maven POM Metadata Fields",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "103e4ec9-0a87-450b-af77-479448ddef11",
    "assignerShortName": "Sonatype",
    "cveId": "CVE-2026-77121",
    "datePublished": "2026-09-02T17:03:26.186Z",
    "dateReserved": "2026-08-20T13:00:23.220Z",
    "dateUpdated": "2026-09-02T17:42:57.776Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-113368 (GCVE-0-2026-113368)

Vulnerability from cvelistv5 – Published: 2026-11-04 20:01 – Updated: 2026-11-04 20:01

Title

Nexus Repository 3 - Group Repository Member Authorization Bypass

Summary

Sonatype Nexus Repository 3 does not check that a user account is authorized to access a repository before the repository is added as a member of a group repository. A user account that has signed in with valid credentials and holds the add or edit privilege on a group repository can add a repository that the account cannot read or browse, and then read the content of that repository through the group. The anonymous user can only do this if an administrator has explicitly granted it that privilege.

Severity

5.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

CWE

CWE-862 - Missing Authorization

Assigner

Sonatype CNA under the mitre root

CNA scorecard B 90/100 over 35 records in the last 180 days details

References

2 references

URL	Tags
https://help.sonatype.com/en/sonatype-nexus-repos…	patch
https://support.sonatype.com/hc/en-us/articles/56…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Sonatype	Nexus Repository 3	Affected: 3.0.0 , < 3.98.0 (semver) cpe:2.3:a:sonatype:nexus_repository_manager:3.0.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.0.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.0.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.1.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.2.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.2.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.3.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.3.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.3.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.4.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.5.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.5.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.5.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.6.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.6.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.6.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.7.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.7.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.8.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.9.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.10.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.11.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.12.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.12.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.13.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.14.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.15.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.15.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.15.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.15.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.16.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.16.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.16.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.17.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.17.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.17.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.18.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.18.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.19.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.19.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.20.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.20.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.20.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.20.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.21.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.21.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.21.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.22.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.22.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.23.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.24.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.24.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.25.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.25.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.26.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.26.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.27.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.28.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.28.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.29.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.29.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.29.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.30.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.30.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.31.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.31.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.32.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.32.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.33.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.33.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.34.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.34.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.35.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.36.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.38.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.38.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.39.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.40.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.40.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.41.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.41.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.42.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.43.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.44.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.45.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.45.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.46.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.47.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.47.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.48.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.49.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.50.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.51.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.52.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.53.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.53.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.54.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.54.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.55.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.56.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.57.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.57.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.58.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.58.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.59.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.60.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.61.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.62.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.63.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.64.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.65.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.66.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.67.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.67.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.68.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.68.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.69.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.5:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.71.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.72.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.73.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.74.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.75.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.75.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.76.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.76.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.79.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.79.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.79.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.80.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.80.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.81.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.81.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.81.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.82.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.82.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.82.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.85.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.85.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.85.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.88.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.88.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.89.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.89.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.89.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.5:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.6:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.5:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.5:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.97.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.97.1:::::::*

Credits

Beni Saprulah (HackerOne: https://hackerone.com/bebensap, LinkedIn: https://www.linkedin.com/in/beni-saprulah)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.0.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.0.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.0.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.1.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.2.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.2.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.3.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.3.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.3.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.4.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.5.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.5.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.5.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.6.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.6.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.6.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.7.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.7.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.8.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.9.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.10.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.11.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.12.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.12.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.13.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.14.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.15.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.15.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.15.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.15.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.16.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.16.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.16.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.17.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.17.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.17.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.18.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.18.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.19.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.19.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.20.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.20.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.20.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.20.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.21.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.21.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.21.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.22.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.22.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.23.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.24.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.24.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.25.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.25.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.26.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.26.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.27.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.28.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.28.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.29.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.29.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.29.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.30.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.30.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.31.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.31.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.32.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.32.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.33.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.33.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.34.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.34.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.35.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.36.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.38.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.38.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.39.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.40.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.40.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.41.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.41.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.42.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.43.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.44.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.45.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.45.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.46.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.47.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.47.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.48.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.49.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.50.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.51.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.52.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.53.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.53.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.54.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.54.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.55.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.56.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.57.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.57.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.58.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.58.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.59.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.60.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.61.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.62.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.63.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.64.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.65.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.66.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.67.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.67.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.68.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.68.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.69.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.71.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.72.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.73.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.74.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.75.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.75.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.76.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.76.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.79.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.79.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.79.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.80.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.80.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.81.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.81.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.81.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.82.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.82.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.82.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.85.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.85.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.85.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.88.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.88.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.89.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.89.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.89.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.6:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.97.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.97.1:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "Nexus Repository 3",
          "vendor": "Sonatype",
          "versions": [
            {
              "lessThan": "3.98.0",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Beni Saprulah (HackerOne: https://hackerone.com/bebensap, LinkedIn: https://www.linkedin.com/in/beni-saprulah)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eSonatype Nexus Repository 3 does not check that a user account is authorized to access a repository before the repository is added as a member of a group repository. A user account that has signed in with valid credentials and holds the add or edit privilege on a group repository can add a repository that the account cannot read or browse, and then read the content of that repository through the group. The anonymous user can only do this if an administrator has explicitly granted it that privilege.\u003c/p\u003e"
            }
          ],
          "value": "Sonatype Nexus Repository 3 does not check that a user account is authorized to access a repository before the repository is added as a member of a group repository. A user account that has signed in with valid credentials and holds the add or edit privilege on a group repository can add a repository that the account cannot read or browse, and then read the content of that repository through the group. The anonymous user can only do this if an administrator has explicitly granted it that privilege."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-862",
              "description": "CWE-862 Missing Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-04T20:01:20.764Z",
        "orgId": "103e4ec9-0a87-450b-af77-479448ddef11",
        "shortName": "Sonatype"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://help.sonatype.com/en/sonatype-nexus-repository-3-98-0-release-notes.html"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://support.sonatype.com/hc/en-us/articles/56599581299987/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Nexus Repository 3 - Group Repository Member Authorization Bypass",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "103e4ec9-0a87-450b-af77-479448ddef11",
    "assignerShortName": "Sonatype",
    "cveId": "CVE-2026-113368",
    "datePublished": "2026-11-04T20:01:20.764Z",
    "dateReserved": "2026-10-20T01:54:48.995Z",
    "dateUpdated": "2026-11-04T20:01:20.764Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-113369 (GCVE-0-2026-113369)

Vulnerability from cvelistv5 – Published: 2026-11-04 20:01 – Updated: 2026-11-04 20:01

Title

Nexus Repository 3 - Stored Cross-Site Scripting in OCI Attestations Tab

Summary

Sonatype Nexus Repository 3 allows a user account that can push manifests to a hosted OCI repository (a user account that holds the edit permission on that repository) to store script content in the artifact type field of an OCI manifest. The script runs in the browser of a user who opens the Attestations tab for the related image in the Browse user interface, with the permissions of the viewing user.

Severity

6.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N

CWE

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Assigner

Sonatype CNA under the mitre root

CNA scorecard B 90/100 over 35 records in the last 180 days details

References

2 references

URL	Tags
https://help.sonatype.com/en/sonatype-nexus-repos…	patch
https://support.sonatype.com/hc/en-us/articles/56…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Sonatype	Nexus Repository 3	Affected: 3.94.0 , < 3.98.0 (semver) cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.97.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.97.1:::::::*

Credits

Nguyen Truong Son (truongson526@gmail.com)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.97.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.97.1:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "Nexus Repository 3",
          "vendor": "Sonatype",
          "versions": [
            {
              "lessThan": "3.98.0",
              "status": "affected",
              "version": "3.94.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Nguyen Truong Son (truongson526@gmail.com)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eSonatype Nexus Repository 3 allows a user account that can push manifests to a hosted OCI repository (a user account that holds the edit permission on that repository) to store script content in the artifact type field of an OCI manifest. The script runs in the browser of a user who opens the Attestations tab for the related image in the Browse user interface, with the permissions of the viewing user.\u003c/p\u003e"
            }
          ],
          "value": "Sonatype Nexus Repository 3 allows a user account that can push manifests to a hosted OCI repository (a user account that holds the edit permission on that repository) to store script content in the artifact type field of an OCI manifest. The script runs in the browser of a user who opens the Attestations tab for the related image in the Browse user interface, with the permissions of the viewing user."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "PASSIVE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-04T20:01:20.533Z",
        "orgId": "103e4ec9-0a87-450b-af77-479448ddef11",
        "shortName": "Sonatype"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://help.sonatype.com/en/sonatype-nexus-repository-3-98-0-release-notes.html"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://support.sonatype.com/hc/en-us/articles/56597339691027/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Nexus Repository 3 - Stored Cross-Site Scripting in OCI Attestations Tab",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "103e4ec9-0a87-450b-af77-479448ddef11",
    "assignerShortName": "Sonatype",
    "cveId": "CVE-2026-113369",
    "datePublished": "2026-11-04T20:01:20.533Z",
    "dateReserved": "2026-10-20T01:54:48.996Z",
    "dateUpdated": "2026-11-04T20:01:20.533Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-113370 (GCVE-0-2026-113370)

Vulnerability from cvelistv5 – Published: 2026-11-04 20:01 – Updated: 2026-11-04 20:01

Title

Nexus Repository 3 - SQL Injection in Reindex Search by Pattern Task

Summary

Sonatype Nexus Repository 3 contains a SQL injection vulnerability in the optional "Reindex Search Tables By Pattern" task. A user who holds the nexus:tasks:create privilege can supply a crafted filter condition that the database runs as SQL. This allows the user to modify data in the Nexus database. The task is available only when the non-default setting nexus.reindex.search.by.pattern.visible is set to true.

Severity

7.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CWE

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Assigner

Sonatype CNA under the mitre root

CNA scorecard B 90/100 over 35 records in the last 180 days details

References

2 references

URL	Tags
https://help.sonatype.com/en/sonatype-nexus-repos…	patch
https://support.sonatype.com/hc/en-us/articles/56…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Sonatype	Nexus Repository 3	Affected: 3.90.0 , < 3.98.0 (semver) cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.5:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.97.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.97.1:::::::*

Credits

Shreyas Chavhan (HackerOne: shreyaschavhan)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.97.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.97.1:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "Nexus Repository 3",
          "vendor": "Sonatype",
          "versions": [
            {
              "lessThan": "3.98.0",
              "status": "affected",
              "version": "3.90.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Shreyas Chavhan (HackerOne: shreyaschavhan)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eSonatype Nexus Repository 3 contains a SQL injection vulnerability in the optional \"Reindex Search Tables By Pattern\" task. A user who holds the nexus:tasks:create privilege can supply a crafted filter condition that the database runs as SQL. This allows the user to modify data in the Nexus database. The task is available only when the non-default setting nexus.reindex.search.by.pattern.visible is set to true.\u003c/p\u003e"
            }
          ],
          "value": "Sonatype Nexus Repository 3 contains a SQL injection vulnerability in the optional \"Reindex Search Tables By Pattern\" task. A user who holds the nexus:tasks:create privilege can supply a crafted filter condition that the database runs as SQL. This allows the user to modify data in the Nexus database. The task is available only when the non-default setting nexus.reindex.search.by.pattern.visible is set to true."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-89",
              "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-04T20:01:20.304Z",
        "orgId": "103e4ec9-0a87-450b-af77-479448ddef11",
        "shortName": "Sonatype"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://help.sonatype.com/en/sonatype-nexus-repository-3-98-0-release-notes.html"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://support.sonatype.com/hc/en-us/articles/56603207226131/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Nexus Repository 3 - SQL Injection in Reindex Search by Pattern Task",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "103e4ec9-0a87-450b-af77-479448ddef11",
    "assignerShortName": "Sonatype",
    "cveId": "CVE-2026-113370",
    "datePublished": "2026-11-04T20:01:20.304Z",
    "dateReserved": "2026-10-20T01:54:48.996Z",
    "dateUpdated": "2026-11-04T20:01:20.304Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-113371 (GCVE-0-2026-113371)

Vulnerability from cvelistv5 – Published: 2026-11-04 20:01 – Updated: 2026-11-04 20:01

Title

Nexus Repository 3 - Insufficiently Protected Credentials in Repository Signing Passphrase

Summary

Sonatype Nexus Repository 3 returns the signing passphrase of an APT or YUM repository, through an internal REST endpoint, to a user account that holds only the read privilege for administering that repository. The account does not need the privilege to edit the repository.

Severity

7.1 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

CWE

CWE-522 - Insufficiently Protected Credentials

Assigner

Sonatype CNA under the mitre root

CNA scorecard B 90/100 over 35 records in the last 180 days details

References

2 references

URL	Tags
https://help.sonatype.com/en/sonatype-nexus-repos…	patch
https://support.sonatype.com/hc/en-us/articles/56…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Sonatype	Nexus Repository 3	Affected: 3.93.0 , < 3.98.0 (semver) cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.97.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.97.1:::::::*

Credits

Ho Boon Suan

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.97.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.97.1:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "Nexus Repository 3",
          "vendor": "Sonatype",
          "versions": [
            {
              "lessThan": "3.98.0",
              "status": "affected",
              "version": "3.93.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Ho Boon Suan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eSonatype Nexus Repository 3 returns the signing passphrase of an APT or YUM repository, through an internal REST endpoint, to a user account that holds only the read privilege for administering that repository. The account does not need the privilege to edit the repository.\u003c/p\u003e"
            }
          ],
          "value": "Sonatype Nexus Repository 3 returns the signing passphrase of an APT or YUM repository, through an internal REST endpoint, to a user account that holds only the read privilege for administering that repository. The account does not need the privilege to edit the repository."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-522",
              "description": "CWE-522 Insufficiently Protected Credentials",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-04T20:01:20.078Z",
        "orgId": "103e4ec9-0a87-450b-af77-479448ddef11",
        "shortName": "Sonatype"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://help.sonatype.com/en/sonatype-nexus-repository-3-98-0-release-notes.html"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://support.sonatype.com/hc/en-us/articles/56609541356051/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Nexus Repository 3 - Insufficiently Protected Credentials in Repository Signing Passphrase",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "103e4ec9-0a87-450b-af77-479448ddef11",
    "assignerShortName": "Sonatype",
    "cveId": "CVE-2026-113371",
    "datePublished": "2026-11-04T20:01:20.078Z",
    "dateReserved": "2026-10-20T01:54:48.996Z",
    "dateUpdated": "2026-11-04T20:01:20.078Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-113372 (GCVE-0-2026-113372)

Vulnerability from cvelistv5 – Published: 2026-11-04 20:01 – Updated: 2026-11-04 20:01

Title

Nexus Repository 3 - Insufficiently Protected Credentials in YUM Repository Signing Key

Summary

Sonatype Nexus Repository 3 returns the private signing key of a YUM proxy or group repository to an account that holds only the read privilege for administering that repository. The account does not need the privilege to edit the repository. A party that holds the key can sign repository metadata as that repository.

Severity

7.1 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

CWE

CWE-522 - Insufficiently Protected Credentials

Assigner

Sonatype CNA under the mitre root

CNA scorecard B 90/100 over 35 records in the last 180 days details

References

2 references

URL	Tags
https://help.sonatype.com/en/sonatype-nexus-repos…	patch
https://support.sonatype.com/hc/en-us/articles/56…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Sonatype	Nexus Repository 3	Affected: 3.93.0 , < 3.98.0 (semver) cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.97.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.97.1:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.97.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.97.1:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "Nexus Repository 3",
          "vendor": "Sonatype",
          "versions": [
            {
              "lessThan": "3.98.0",
              "status": "affected",
              "version": "3.93.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eSonatype Nexus Repository 3 returns the private signing key of a YUM proxy or group repository to an account that holds only the read privilege for administering that repository. The account does not need the privilege to edit the repository. A party that holds the key can sign repository metadata as that repository.\u003c/p\u003e"
            }
          ],
          "value": "Sonatype Nexus Repository 3 returns the private signing key of a YUM proxy or group repository to an account that holds only the read privilege for administering that repository. The account does not need the privilege to edit the repository. A party that holds the key can sign repository metadata as that repository."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-522",
              "description": "CWE-522 Insufficiently Protected Credentials",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-04T20:01:19.849Z",
        "orgId": "103e4ec9-0a87-450b-af77-479448ddef11",
        "shortName": "Sonatype"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://help.sonatype.com/en/sonatype-nexus-repository-3-98-0-release-notes.html"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://support.sonatype.com/hc/en-us/articles/56612283547539/"
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "title": "Nexus Repository 3 - Insufficiently Protected Credentials in YUM Repository Signing Key",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "103e4ec9-0a87-450b-af77-479448ddef11",
    "assignerShortName": "Sonatype",
    "cveId": "CVE-2026-113372",
    "datePublished": "2026-11-04T20:01:19.849Z",
    "dateReserved": "2026-10-20T01:54:48.996Z",
    "dateUpdated": "2026-11-04T20:01:19.849Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-113373 (GCVE-0-2026-113373)

Vulnerability from cvelistv5 – Published: 2026-11-04 20:01 – Updated: 2026-11-04 20:01

Title

Nexus Repository 3 - Disabled or Locked Single Sign-On Users Can Sign In Again

Summary

Sonatype Nexus Repository 3 Pro does not check the local account status when a user signs in through a configured SAML or OAuth2/OpenID Connect identity provider. A user whose account was disabled or locked by an administrator in Nexus Repository can sign in again with valid identity provider credentials for the same account, and then receives a new session with the roles of that account. The attacker needs no Nexus Repository session and no Nexus Repository privilege. The attacker needs a named account that holds valid credentials at the identity provider. The anonymous user is not part of this attack path.

Severity

9.1 (Critical)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

CWE

CWE-1390 - Weak Authentication

Assigner

Sonatype CNA under the mitre root

CNA scorecard B 90/100 over 35 records in the last 180 days details

References

2 references

URL	Tags
https://help.sonatype.com/en/sonatype-nexus-repos…	patch
https://support.sonatype.com/hc/en-us/articles/56…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Sonatype	Nexus Repository 3	Affected: 3.86.0 , < 3.98.0 (semver) cpe:2.3:a:sonatype:nexus_repository_manager:3.86.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.88.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.88.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.89.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.89.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.5:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.97.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.97.1:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.88.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.88.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.89.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.89.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.97.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.97.1:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "Nexus Repository 3",
          "vendor": "Sonatype",
          "versions": [
            {
              "lessThan": "3.98.0",
              "status": "affected",
              "version": "3.86.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eSonatype Nexus Repository 3 Pro does not check the local account status when a user signs in through a configured SAML or OAuth2/OpenID Connect identity provider. A user whose account was disabled or locked by an administrator in Nexus Repository can sign in again with valid identity provider credentials for the same account, and then receives a new session with the roles of that account. The attacker needs no Nexus Repository session and no Nexus Repository privilege. The attacker needs a named account that holds valid credentials at the identity provider. The anonymous user is not part of this attack path.\u003c/p\u003e"
            }
          ],
          "value": "Sonatype Nexus Repository 3 Pro does not check the local account status when a user signs in through a configured SAML or OAuth2/OpenID Connect identity provider. A user whose account was disabled or locked by an administrator in Nexus Repository can sign in again with valid identity provider credentials for the same account, and then receives a new session with the roles of that account. The attacker needs no Nexus Repository session and no Nexus Repository privilege. The attacker needs a named account that holds valid credentials at the identity provider. The anonymous user is not part of this attack path."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1390",
              "description": "CWE-1390 Weak Authentication",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-04T20:01:19.624Z",
        "orgId": "103e4ec9-0a87-450b-af77-479448ddef11",
        "shortName": "Sonatype"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://help.sonatype.com/en/sonatype-nexus-repository-3-98-0-release-notes.html"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://support.sonatype.com/hc/en-us/articles/56614238092947/"
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "title": "Nexus Repository 3 - Disabled or Locked Single Sign-On Users Can Sign In Again",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "103e4ec9-0a87-450b-af77-479448ddef11",
    "assignerShortName": "Sonatype",
    "cveId": "CVE-2026-113373",
    "datePublished": "2026-11-04T20:01:19.624Z",
    "dateReserved": "2026-10-20T01:54:48.996Z",
    "dateUpdated": "2026-11-04T20:01:19.624Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-113374 (GCVE-0-2026-113374)

Vulnerability from cvelistv5 – Published: 2026-11-04 20:01 – Updated: 2026-11-04 20:01

Title

Nexus Repository 3 - Privilege Escalation via Rut Auth Capability Creation

Summary

Sonatype Nexus Repository 3 does not require realm administration permission when a user creates a Rut Auth capability. A user who holds only the capability creation permission (nexus:capabilities:create) can create this capability, which turns on header-based authentication for the instance. A remote client can then authenticate as an existing user, including an administrator, without credentials.

Severity

8.6 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

CWE

CWE-862 - Missing Authorization

Assigner

Sonatype CNA under the mitre root

CNA scorecard B 90/100 over 35 records in the last 180 days details

References

2 references

URL	Tags
https://help.sonatype.com/en/sonatype-nexus-repos…	patch
https://support.sonatype.com/hc/en-us/articles/56…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Sonatype	Nexus Repository 3	Affected: 3.0.0 , < 3.98.0 (semver) cpe:2.3:a:sonatype:nexus_repository_manager:3.0.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.0.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.0.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.1.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.2.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.2.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.3.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.3.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.3.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.4.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.5.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.5.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.5.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.6.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.6.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.6.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.7.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.7.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.8.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.9.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.10.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.11.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.12.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.12.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.13.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.14.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.15.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.15.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.15.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.15.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.16.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.16.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.16.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.17.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.17.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.17.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.18.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.18.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.19.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.19.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.20.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.20.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.20.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.20.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.21.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.21.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.21.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.22.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.22.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.23.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.24.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.24.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.25.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.25.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.26.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.26.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.27.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.28.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.28.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.29.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.29.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.29.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.30.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.30.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.31.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.31.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.32.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.32.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.33.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.33.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.34.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.34.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.35.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.36.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.38.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.38.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.39.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.40.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.40.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.41.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.41.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.42.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.43.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.44.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.45.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.45.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.46.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.47.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.47.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.48.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.49.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.50.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.51.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.52.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.53.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.53.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.54.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.54.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.55.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.56.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.57.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.57.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.58.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.58.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.59.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.60.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.61.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.62.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.63.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.64.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.65.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.66.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.67.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.67.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.68.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.68.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.69.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.71.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.72.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.73.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.74.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.75.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.75.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.76.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.76.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.79.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.79.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.80.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.81.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.81.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.82.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.82.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.85.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.85.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.88.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.88.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.89.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.89.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.5:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.97.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.97.1:::::::*

Credits

0xoroot-sec

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.0.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.0.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.0.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.1.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.2.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.2.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.3.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.3.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.3.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.4.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.5.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.5.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.5.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.6.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.6.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.6.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.7.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.7.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.8.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.9.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.10.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.11.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.12.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.12.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.13.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.14.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.15.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.15.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.15.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.15.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.16.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.16.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.16.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.17.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.17.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.17.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.18.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.18.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.19.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.19.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.20.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.20.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.20.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.20.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.21.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.21.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.21.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.22.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.22.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.23.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.24.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.24.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.25.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.25.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.26.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.26.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.27.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.28.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.28.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.29.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.29.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.29.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.30.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.30.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.31.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.31.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.32.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.32.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.33.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.33.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.34.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.34.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.35.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.36.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.38.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.38.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.39.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.40.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.40.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.41.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.41.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.42.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.43.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.44.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.45.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.45.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.46.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.47.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.47.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.48.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.49.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.50.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.51.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.52.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.53.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.53.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.54.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.54.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.55.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.56.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.57.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.57.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.58.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.58.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.59.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.60.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.61.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.62.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.63.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.64.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.65.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.66.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.67.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.67.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.68.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.68.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.69.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.71.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.72.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.73.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.74.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.75.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.75.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.76.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.76.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.79.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.79.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.80.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.81.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.81.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.82.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.82.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.85.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.85.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.88.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.88.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.89.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.89.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.97.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.97.1:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "Nexus Repository 3",
          "vendor": "Sonatype",
          "versions": [
            {
              "lessThan": "3.98.0",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "0xoroot-sec"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eSonatype Nexus Repository 3 does not require realm administration permission when a user creates a Rut Auth capability. A user who holds only the capability creation permission (nexus:capabilities:create) can create this capability, which turns on header-based authentication for the instance. A remote client can then authenticate as an existing user, including an administrator, without credentials.\u003c/p\u003e"
            }
          ],
          "value": "Sonatype Nexus Repository 3 does not require realm administration permission when a user creates a Rut Auth capability. A user who holds only the capability creation permission (nexus:capabilities:create) can create this capability, which turns on header-based authentication for the instance. A remote client can then authenticate as an existing user, including an administrator, without credentials."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-862",
              "description": "CWE-862 Missing Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-04T20:01:19.329Z",
        "orgId": "103e4ec9-0a87-450b-af77-479448ddef11",
        "shortName": "Sonatype"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://help.sonatype.com/en/sonatype-nexus-repository-3-98-0-release-notes.html"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://support.sonatype.com/hc/en-us/articles/56616522124435/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Nexus Repository 3 - Privilege Escalation via Rut Auth Capability Creation",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "103e4ec9-0a87-450b-af77-479448ddef11",
    "assignerShortName": "Sonatype",
    "cveId": "CVE-2026-113374",
    "datePublished": "2026-11-04T20:01:19.329Z",
    "dateReserved": "2026-10-20T01:54:48.996Z",
    "dateUpdated": "2026-11-04T20:01:19.329Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-97712 (GCVE-0-2026-97712)

Vulnerability from cvelistv5 – Published: 2026-10-15 15:34 – Updated: 2026-10-16 03:56

Title

Nexus Repository 3 - Privilege Escalation via Role Management

Summary

Sonatype Nexus Repository 3 allows a user that holds the role create or role update permission to grant roles and privileges that the account does not hold. This can give the user more access than intended, up to full administrative access.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-15 00:00 UTC

CWE

CWE-862 - Missing Authorization

Assigner

Sonatype CNA under the mitre root

CNA scorecard B 90/100 over 35 records in the last 180 days details

References

2 references

URL	Tags
https://help.sonatype.com/en/sonatype-nexus-repos…	patch
https://support.sonatype.com/hc/en-us/articles/56…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Sonatype	Nexus Repository 3	Affected: 3.0.0 , < 3.97.0 (semver) cpe:2.3:a:sonatype:nexus_repository_manager:3.0.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.0.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.0.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.1.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.2.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.2.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.3.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.3.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.3.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.4.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.5.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.5.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.5.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.6.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.6.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.6.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.7.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.7.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.8.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.9.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.10.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.11.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.12.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.12.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.13.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.14.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.15.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.15.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.15.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.15.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.16.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.16.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.16.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.17.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.17.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.17.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.18.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.18.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.19.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.19.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.20.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.20.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.20.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.20.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.21.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.21.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.21.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.22.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.22.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.23.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.24.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.24.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.25.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.25.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.26.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.26.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.27.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.28.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.28.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.29.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.29.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.29.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.30.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.30.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.31.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.31.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.32.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.32.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.33.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.33.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.34.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.34.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.35.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.36.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.38.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.38.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.39.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.40.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.40.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.41.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.41.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.42.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.43.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.44.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.45.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.45.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.46.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.47.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.47.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.48.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.49.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.50.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.51.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.52.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.53.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.53.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.54.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.54.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.55.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.56.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.57.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.57.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.58.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.58.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.59.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.60.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.61.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.62.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.63.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.64.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.65.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.66.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.67.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.67.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.68.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.68.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.69.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.71.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.72.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.73.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.74.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.75.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.75.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.76.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.76.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.79.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.79.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.80.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.81.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.81.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.82.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.82.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.85.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.85.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.88.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.88.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.89.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.89.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.5:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.4:::::::*

Credits

Beni Saprulah (HackerOne: https://hackerone.com/bebensap, LinkedIn: https://www.linkedin.com/in/beni-saprulah)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-97712",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-15T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-16T03:56:56.472Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.0.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.0.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.0.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.1.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.2.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.2.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.3.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.3.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.3.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.4.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.5.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.5.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.5.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.6.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.6.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.6.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.7.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.7.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.8.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.9.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.10.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.11.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.12.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.12.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.13.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.14.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.15.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.15.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.15.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.15.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.16.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.16.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.16.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.17.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.17.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.17.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.18.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.18.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.19.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.19.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.20.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.20.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.20.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.20.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.21.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.21.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.21.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.22.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.22.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.23.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.24.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.24.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.25.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.25.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.26.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.26.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.27.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.28.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.28.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.29.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.29.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.29.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.30.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.30.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.31.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.31.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.32.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.32.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.33.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.33.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.34.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.34.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.35.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.36.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.38.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.38.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.39.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.40.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.40.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.41.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.41.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.42.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.43.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.44.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.45.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.45.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.46.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.47.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.47.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.48.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.49.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.50.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.51.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.52.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.53.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.53.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.54.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.54.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.55.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.56.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.57.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.57.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.58.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.58.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.59.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.60.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.61.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.62.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.63.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.64.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.65.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.66.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.67.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.67.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.68.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.68.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.69.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.71.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.72.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.73.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.74.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.75.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.75.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.76.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.76.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.79.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.79.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.80.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.81.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.81.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.82.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.82.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.85.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.85.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.88.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.88.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.89.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.89.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.4:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "Nexus Repository 3",
          "vendor": "Sonatype",
          "versions": [
            {
              "lessThan": "3.97.0",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Beni Saprulah (HackerOne: https://hackerone.com/bebensap, LinkedIn: https://www.linkedin.com/in/beni-saprulah)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eSonatype Nexus Repository 3 allows a user that holds the role create or role update permission to grant roles and privileges that the account does not hold. This can give the user more access than intended, up to full administrative access.\u003c/p\u003e"
            }
          ],
          "value": "Sonatype Nexus Repository 3 allows a user that holds the role create or role update permission to grant roles and privileges that the account does not hold. This can give the user more access than intended, up to full administrative access."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-862",
              "description": "CWE-862 Missing Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-15T15:34:40.948Z",
        "orgId": "103e4ec9-0a87-450b-af77-479448ddef11",
        "shortName": "Sonatype"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://help.sonatype.com/en/sonatype-nexus-repository-3-97-0-release-notes.html"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://support.sonatype.com/hc/en-us/articles/56207076233619/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Nexus Repository 3 - Privilege Escalation via Role Management",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "103e4ec9-0a87-450b-af77-479448ddef11",
    "assignerShortName": "Sonatype",
    "cveId": "CVE-2026-97712",
    "datePublished": "2026-10-15T15:34:40.948Z",
    "dateReserved": "2026-09-24T21:53:06.818Z",
    "dateUpdated": "2026-10-16T03:56:56.472Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-97667 (GCVE-0-2026-97667)

Vulnerability from cvelistv5 – Published: 2026-10-15 15:34 – Updated: 2026-10-15 16:10

Title

Nexus Repository 3 - Stored Cross-Site Scripting in Browse UI

Summary

Sonatype Nexus Repository 3 allows a user account that holds the edit permission on a hosted R repository to store script content in the metadata of an uploaded R package. The script runs in the browser of a user who opens the details of that package in the Browse user interface, with the permissions of the viewing user. In this description, a user account means an account that has supplied valid credentials. The anonymous user, if enabled, is also a user account and can hold this permission if an administrator grants it.

Severity

5.1 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-15 16:10 UTC

CWE

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Assigner

Sonatype CNA under the mitre root

CNA scorecard B 90/100 over 35 records in the last 180 days details

References

2 references

URL	Tags
https://help.sonatype.com/en/sonatype-nexus-repos…	patch
https://support.sonatype.com/hc/en-us/articles/56…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Sonatype	Nexus Repository 3	Affected: 3.28.0 , < 3.97.0 (semver) cpe:2.3:a:sonatype:nexus_repository_manager:3.28.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.28.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.29.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.29.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.29.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.30.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.30.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.31.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.31.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.32.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.32.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.33.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.33.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.34.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.34.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.35.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.36.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.38.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.38.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.39.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.40.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.40.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.41.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.41.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.42.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.43.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.44.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.45.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.45.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.46.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.47.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.47.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.48.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.49.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.50.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.51.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.52.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.53.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.53.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.54.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.54.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.55.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.56.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.57.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.57.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.58.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.58.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.59.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.60.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.61.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.62.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.63.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.64.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.65.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.66.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.67.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.67.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.68.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.68.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.69.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.71.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.72.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.73.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.74.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.75.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.75.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.76.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.76.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.79.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.79.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.80.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.81.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.81.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.82.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.82.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.85.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.85.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.88.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.88.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.89.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.89.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.5:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.4:::::::*

Credits

Uttam Sabhadiya

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-97667",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-15T16:10:19.110825Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T16:10:31.406Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.28.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.28.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.29.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.29.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.29.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.30.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.30.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.31.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.31.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.32.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.32.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.33.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.33.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.34.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.34.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.35.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.36.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.38.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.38.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.39.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.40.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.40.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.41.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.41.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.42.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.43.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.44.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.45.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.45.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.46.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.47.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.47.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.48.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.49.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.50.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.51.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.52.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.53.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.53.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.54.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.54.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.55.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.56.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.57.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.57.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.58.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.58.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.59.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.60.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.61.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.62.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.63.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.64.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.65.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.66.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.67.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.67.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.68.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.68.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.69.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.71.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.72.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.73.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.74.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.75.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.75.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.76.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.76.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.79.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.79.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.80.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.81.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.81.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.82.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.82.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.85.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.85.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.88.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.88.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.89.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.89.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.4:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "Nexus Repository 3",
          "vendor": "Sonatype",
          "versions": [
            {
              "lessThan": "3.97.0",
              "status": "affected",
              "version": "3.28.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Uttam Sabhadiya"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eSonatype Nexus Repository 3 allows a user account that holds the edit permission on a hosted R repository to store script content in the metadata of an uploaded R package. The script runs in the browser of a user who opens the details of that package in the Browse user interface, with the permissions of the viewing user. In this description, a user account means an account that has supplied valid credentials. The anonymous user, if enabled, is also a user account and can hold this permission if an administrator grants it.\u003c/p\u003e"
            }
          ],
          "value": "Sonatype Nexus Repository 3 allows a user account that holds the edit permission on a hosted R repository to store script content in the metadata of an uploaded R package. The script runs in the browser of a user who opens the details of that package in the Browse user interface, with the permissions of the viewing user. In this description, a user account means an account that has supplied valid credentials. The anonymous user, if enabled, is also a user account and can hold this permission if an administrator grants it."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "PASSIVE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-15T15:34:40.548Z",
        "orgId": "103e4ec9-0a87-450b-af77-479448ddef11",
        "shortName": "Sonatype"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://help.sonatype.com/en/sonatype-nexus-repository-3-97-0-release-notes.html"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://support.sonatype.com/hc/en-us/articles/56207477462035/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Nexus Repository 3 - Stored Cross-Site Scripting in Browse UI",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "103e4ec9-0a87-450b-af77-479448ddef11",
    "assignerShortName": "Sonatype",
    "cveId": "CVE-2026-97667",
    "datePublished": "2026-10-15T15:34:40.548Z",
    "dateReserved": "2026-09-24T20:12:26.099Z",
    "dateUpdated": "2026-10-15T16:10:31.406Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-97666 (GCVE-0-2026-97666)

Vulnerability from cvelistv5 – Published: 2026-10-15 15:34 – Updated: 2026-10-15 16:11

Title

Nexus Repository 3 - Unsafe Reflection in ExtDirect Repository Endpoint

Summary

Sonatype Nexus Repository 3 allows an unauthenticated remote attacker to supply attacker-controlled input to a Java class loading call through an ExtDirect endpoint. This allows the attacker to learn whether specific classes are present in the application. The issue does not by itself allow code execution.

Severity

6.9 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-15 16:11 UTC

CWE

CWE-470 - Use of Externally-Controlled Input to Select Classes or Code ("Unsafe Reflection")

Assigner

Sonatype CNA under the mitre root

CNA scorecard B 90/100 over 35 records in the last 180 days details

References

2 references

URL	Tags
https://help.sonatype.com/en/sonatype-nexus-repos…	patch
https://support.sonatype.com/hc/en-us/articles/56…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Sonatype	Nexus Repository 3	Affected: 3.0.0 , < 3.97.0 (semver) cpe:2.3:a:sonatype:nexus_repository_manager:3.0.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.0.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.0.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.1.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.2.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.2.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.3.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.3.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.3.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.4.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.5.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.5.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.5.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.6.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.6.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.6.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.7.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.7.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.8.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.9.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.10.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.11.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.12.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.12.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.13.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.14.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.15.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.15.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.15.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.16.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.16.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.16.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.17.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.18.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.18.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.19.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.19.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.20.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.20.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.21.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.21.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.21.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.22.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.22.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.23.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.24.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.25.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.25.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.26.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.26.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.27.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.28.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.28.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.29.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.29.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.30.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.30.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.31.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.31.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.32.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.32.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.33.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.33.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.34.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.34.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.35.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.36.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.38.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.38.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.39.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.40.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.40.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.41.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.41.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.42.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.43.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.44.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.45.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.45.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.46.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.47.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.48.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.49.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.50.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.51.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.52.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.53.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.53.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.54.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.54.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.55.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.56.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.57.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.58.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.59.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.60.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.61.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.62.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.63.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.64.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.65.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.66.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.67.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.68.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.68.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.69.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.5:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.71.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.72.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.73.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.74.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.75.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.75.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.76.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.76.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.79.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.79.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.80.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.81.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.81.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.82.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.82.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.85.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.85.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.88.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.89.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.89.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.5:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.4:::::::*

Credits

wupco123

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-97666",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-15T16:11:03.463175Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T16:11:15.158Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.0.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.0.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.0.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.1.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.2.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.2.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.3.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.3.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.3.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.4.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.5.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.5.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.5.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.6.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.6.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.6.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.7.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.7.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.8.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.9.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.10.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.11.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.12.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.12.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.13.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.14.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.15.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.15.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.15.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.16.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.16.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.16.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.17.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.18.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.18.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.19.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.19.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.20.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.20.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.21.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.21.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.21.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.22.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.22.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.23.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.24.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.25.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.25.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.26.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.26.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.27.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.28.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.28.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.29.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.29.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.30.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.30.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.31.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.31.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.32.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.32.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.33.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.33.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.34.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.34.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.35.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.36.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.38.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.38.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.39.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.40.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.40.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.41.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.41.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.42.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.43.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.44.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.45.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.45.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.46.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.47.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.48.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.49.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.50.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.51.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.52.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.53.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.53.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.54.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.54.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.55.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.56.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.57.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.58.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.59.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.60.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.61.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.62.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.63.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.64.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.65.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.66.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.67.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.68.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.68.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.69.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.71.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.72.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.73.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.74.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.75.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.75.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.76.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.76.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.79.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.79.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.80.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.81.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.81.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.82.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.82.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.85.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.85.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.88.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.89.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.89.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.4:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "Nexus Repository 3",
          "vendor": "Sonatype",
          "versions": [
            {
              "lessThan": "3.97.0",
              "status": "affected",
              "version": "3.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "wupco123"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eSonatype Nexus Repository 3 allows an unauthenticated remote attacker to supply attacker-controlled input to a Java class loading call through an ExtDirect endpoint. This allows the attacker to learn whether specific classes are present in the application. The issue does not by itself allow code execution.\u003c/p\u003e"
            }
          ],
          "value": "Sonatype Nexus Repository 3 allows an unauthenticated remote attacker to supply attacker-controlled input to a Java class loading call through an ExtDirect endpoint. This allows the attacker to learn whether specific classes are present in the application. The issue does not by itself allow code execution."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-470",
              "description": "CWE-470 Use of Externally-Controlled Input to Select Classes or Code (\"Unsafe Reflection\")",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-15T15:34:40.295Z",
        "orgId": "103e4ec9-0a87-450b-af77-479448ddef11",
        "shortName": "Sonatype"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://help.sonatype.com/en/sonatype-nexus-repository-3-97-0-release-notes.html"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://support.sonatype.com/hc/en-us/articles/56206649520147/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Nexus Repository 3 - Unsafe Reflection in ExtDirect Repository Endpoint",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "103e4ec9-0a87-450b-af77-479448ddef11",
    "assignerShortName": "Sonatype",
    "cveId": "CVE-2026-97666",
    "datePublished": "2026-10-15T15:34:40.295Z",
    "dateReserved": "2026-09-24T20:12:25.471Z",
    "dateUpdated": "2026-10-15T16:11:15.158Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-97665 (GCVE-0-2026-97665)

Vulnerability from cvelistv5 – Published: 2026-10-15 15:34 – Updated: 2026-10-15 16:11

Title

Nexus Repository 3 - Missing Authorization on NuGet Symbol Package Upload

Summary

A missing authorization check in Nexus Repository 3's NuGet Components API upload path allows an account holding only repository read and browse privileges to upload and persist NuGet symbol packages (.snupkg) to a hosted repository, bypassing the write-permission check enforced for ordinary package uploads. Exploitation requires a hosted NuGet repository with Symbol Server enabled. If anonymous access is enabled, the built-in anonymous user holds read and browse privileges across all repositories by default, so this precondition can also be met without an authenticated account.

Severity

7.1 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-15 16:11 UTC

CWE

CWE-862 - Missing Authorization

Assigner

Sonatype CNA under the mitre root

CNA scorecard B 90/100 over 35 records in the last 180 days details

References

2 references

URL	Tags
https://help.sonatype.com/en/sonatype-nexus-repos…	patch
https://support.sonatype.com/hc/en-us/articles/55…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Sonatype	Nexus Repository 3	Affected: 3.95.0 , < 3.97.0 (semver) cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.96.3:::::::*

Credits

wupco123

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-97665",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-15T16:11:27.450391Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T16:11:49.937Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.96.3:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "Nexus Repository 3",
          "vendor": "Sonatype",
          "versions": [
            {
              "lessThan": "3.97.0",
              "status": "affected",
              "version": "3.95.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "wupco123"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eA missing authorization check in Nexus Repository 3\u0027s NuGet Components API upload path allows an account holding only repository \u003ccode\u003eread\u003c/code\u003e and \u003ccode\u003ebrowse\u003c/code\u003e privileges to upload and persist NuGet symbol packages (\u003ccode\u003e.snupkg\u003c/code\u003e) to a hosted repository, bypassing the write-permission check enforced for ordinary package uploads. Exploitation requires a hosted NuGet repository with Symbol Server enabled. If anonymous access is enabled, the built-in anonymous user holds \u003ccode\u003eread\u003c/code\u003e and \u003ccode\u003ebrowse\u003c/code\u003e privileges across all repositories by default, so this precondition can also be met without an authenticated account.\u003c/p\u003e"
            }
          ],
          "value": "A missing authorization check in Nexus Repository 3\u0027s NuGet Components API upload path allows an account holding only repository read and browse privileges to upload and persist NuGet symbol packages (.snupkg) to a hosted repository, bypassing the write-permission check enforced for ordinary package uploads. Exploitation requires a hosted NuGet repository with Symbol Server enabled. If anonymous access is enabled, the built-in anonymous user holds read and browse privileges across all repositories by default, so this precondition can also be met without an authenticated account."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-862",
              "description": "CWE-862 Missing Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-15T15:34:40.047Z",
        "orgId": "103e4ec9-0a87-450b-af77-479448ddef11",
        "shortName": "Sonatype"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://help.sonatype.com/en/sonatype-nexus-repository-3-97-0-release-notes.html"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://support.sonatype.com/hc/en-us/articles/55793090807827/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Nexus Repository 3 - Missing Authorization on NuGet Symbol Package Upload",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "103e4ec9-0a87-450b-af77-479448ddef11",
    "assignerShortName": "Sonatype",
    "cveId": "CVE-2026-97665",
    "datePublished": "2026-10-15T15:34:40.047Z",
    "dateReserved": "2026-09-24T20:12:24.836Z",
    "dateUpdated": "2026-10-15T16:11:49.937Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-77121 (GCVE-0-2026-77121)

Vulnerability from cvelistv5 – Published: 2026-09-02 17:03 – Updated: 2026-09-02 17:42

Title

Nexus Repository 3 - Denial of Service via Unbounded Maven POM Metadata Fields

Summary

A user account with permission to deploy artifacts to a hosted Maven repository could upload a POM file containing an oversized metadata field. This causes future attempts to list or browse that repository's components to permanently fail until an administrator repairs the underlying data. Only the targeted repository is affected; other repositories and overall server health remain unaffected.

Severity

5.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-02 17:42 UTC

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

Sonatype CNA under the mitre root

CNA scorecard B 90/100 over 35 records in the last 180 days details

References

2 references

URL	Tags
https://help.sonatype.com/en/sonatype-nexus-repos…	patch
https://support.sonatype.com/hc/en-us/articles/54…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Sonatype	Nexus Repository 3	Affected: 3.26.0 , < 3.95.0 (semver) cpe:2.3:a:sonatype:nexus_repository_manager:3.26.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.26.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.27.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.28.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.28.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.29.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.29.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.29.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.30.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.30.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.31.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.31.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.32.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.32.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.33.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.33.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.34.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.34.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.35.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.36.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.38.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.38.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.39.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.40.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.40.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.41.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.41.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.42.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.43.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.44.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.45.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.45.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.46.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.47.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.47.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.48.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.49.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.50.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.51.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.52.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.53.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.53.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.54.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.54.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.55.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.56.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.57.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.57.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.58.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.58.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.59.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.60.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.61.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.62.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.63.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.64.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.65.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.66.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.67.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.67.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.68.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.68.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.69.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.71.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.72.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.73.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.74.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.75.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.75.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.76.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.76.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.79.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.79.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.80.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.81.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.81.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.82.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.82.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.85.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.85.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.88.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.88.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.89.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.89.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.5:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:::::::*

Credits

e0x1337 (elite)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-77121",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-02T17:42:33.557222Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-02T17:42:57.776Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.26.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.26.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.27.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.28.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.28.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.29.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.29.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.29.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.30.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.30.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.31.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.31.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.32.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.32.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.33.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.33.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.34.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.34.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.35.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.36.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.38.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.38.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.39.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.40.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.40.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.41.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.41.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.42.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.43.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.44.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.45.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.45.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.46.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.47.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.47.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.48.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.49.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.50.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.51.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.52.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.53.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.53.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.54.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.54.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.55.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.56.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.57.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.57.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.58.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.58.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.59.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.60.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.61.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.62.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.63.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.64.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.65.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.66.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.67.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.67.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.68.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.68.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.69.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.71.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.72.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.73.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.74.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.75.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.75.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.76.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.76.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.79.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.79.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.80.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.81.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.81.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.82.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.82.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.85.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.85.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.88.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.88.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.89.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.89.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "Nexus Repository 3",
          "vendor": "Sonatype",
          "versions": [
            {
              "lessThan": "3.95.0",
              "status": "affected",
              "version": "3.26.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "e0x1337 (elite)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eA user account with permission to deploy artifacts to a hosted Maven repository could upload a POM file containing an oversized metadata field. This causes future attempts to list or browse that repository\u0027s components to permanently fail until an administrator repairs the underlying data. Only the targeted repository is affected; other repositories and overall server health remain unaffected.\u003c/p\u003e"
            }
          ],
          "value": "A user account with permission to deploy artifacts to a hosted Maven repository could upload a POM file containing an oversized metadata field. This causes future attempts to list or browse that repository\u0027s components to permanently fail until an administrator repairs the underlying data. Only the targeted repository is affected; other repositories and overall server health remain unaffected."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-02T17:03:26.186Z",
        "orgId": "103e4ec9-0a87-450b-af77-479448ddef11",
        "shortName": "Sonatype"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://help.sonatype.com/en/sonatype-nexus-repository-3-95-0-release-notes.html"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://support.sonatype.com/hc/en-us/articles/54635665756691/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Nexus Repository 3 - Denial of Service via Unbounded Maven POM Metadata Fields",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "103e4ec9-0a87-450b-af77-479448ddef11",
    "assignerShortName": "Sonatype",
    "cveId": "CVE-2026-77121",
    "datePublished": "2026-09-02T17:03:26.186Z",
    "dateReserved": "2026-08-20T13:00:23.220Z",
    "dateUpdated": "2026-09-02T17:42:57.776Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-77122 (GCVE-0-2026-77122)

Vulnerability from cvelistv5 – Published: 2026-09-02 17:03 – Updated: 2026-09-02 17:47

Title

Nexus Repository 3 - Incorrect Authorization Allows Disclosure of Member Repository Metadata via Group Repository Permissions

Summary

An authorization flaw in the REST API repository details endpoint (GET /service/rest/v1/repositories/{repositoryName}) in Sonatype Nexus Repository 3 allowed an account holding read or browse permission on a group repository to retrieve metadata for member repositories on which it held no direct permission, by requesting the endpoint directly for the member repository name. For proxy repositories, the disclosed metadata includes the configured remote URL, which may reveal internal upstream hostnames. This includes the anonymous user if it has been granted this permission; whether the anonymous user holds this permission depends on the role and permission configuration of the specific installation.

Severity

5.3 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-02 17:45 UTC

CWE

CWE-863 - Incorrect Authorization

Assigner

Sonatype CNA under the mitre root

CNA scorecard B 90/100 over 35 records in the last 180 days details

References

2 references

URL	Tags
https://help.sonatype.com/en/sonatype-nexus-repos…	patch
https://support.sonatype.com/hc/en-us/articles/54…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Sonatype	Nexus Repository 3	Affected: 3.38.0 , < 3.96.0 (semver) cpe:2.3:a:sonatype:nexus_repository_manager:3.38.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.38.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.39.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.40.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.40.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.41.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.41.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.42.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.43.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.44.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.45.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.45.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.46.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.47.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.48.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.49.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.50.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.51.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.52.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.53.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.53.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.54.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.54.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.55.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.56.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.57.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.58.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.59.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.60.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.61.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.62.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.63.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.64.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.65.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.66.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.67.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.68.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.68.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.69.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.5:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.71.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.72.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.73.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.74.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.75.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.75.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.76.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.76.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.79.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.79.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.80.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.81.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.81.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.82.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.82.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.85.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.85.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.88.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.89.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.89.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.5:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:::::::*

Credits

Yousif (s3c_krd)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-77122",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-02T17:45:31.470694Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-02T17:47:07.777Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.38.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.38.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.39.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.40.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.40.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.41.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.41.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.42.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.43.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.44.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.45.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.45.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.46.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.47.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.48.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.49.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.50.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.51.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.52.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.53.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.53.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.54.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.54.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.55.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.56.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.57.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.58.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.59.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.60.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.61.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.62.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.63.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.64.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.65.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.66.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.67.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.68.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.68.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.69.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.71.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.72.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.73.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.74.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.75.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.75.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.76.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.76.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.79.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.79.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.80.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.81.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.81.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.82.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.82.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.85.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.85.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.88.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.89.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.89.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.3:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "Nexus Repository 3",
          "vendor": "Sonatype",
          "versions": [
            {
              "lessThan": "3.96.0",
              "status": "affected",
              "version": "3.38.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Yousif (s3c_krd)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eAn authorization flaw in the REST API repository details endpoint (\u003ccode\u003eGET /service/rest/v1/repositories/{repositoryName}\u003c/code\u003e) in Sonatype Nexus Repository 3 allowed an account holding read or browse permission on a group repository to retrieve metadata for member repositories on which it held no direct permission, by requesting the endpoint directly for the member repository name. For proxy repositories, the disclosed metadata includes the configured remote URL, which may reveal internal upstream hostnames. This includes the anonymous user if it has been granted this permission; whether the anonymous user holds this permission depends on the role and permission configuration of the specific installation.\u003c/p\u003e"
            }
          ],
          "value": "An authorization flaw in the REST API repository details endpoint (GET /service/rest/v1/repositories/{repositoryName}) in Sonatype Nexus Repository 3 allowed an account holding read or browse permission on a group repository to retrieve metadata for member repositories on which it held no direct permission, by requesting the endpoint directly for the member repository name. For proxy repositories, the disclosed metadata includes the configured remote URL, which may reveal internal upstream hostnames. This includes the anonymous user if it has been granted this permission; whether the anonymous user holds this permission depends on the role and permission configuration of the specific installation."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-863",
              "description": "CWE-863 Incorrect Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-02T17:03:25.960Z",
        "orgId": "103e4ec9-0a87-450b-af77-479448ddef11",
        "shortName": "Sonatype"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://help.sonatype.com/en/sonatype-nexus-repository-3-96-0-release-notes.html"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://support.sonatype.com/hc/en-us/articles/54637328224019/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Nexus Repository 3 - Incorrect Authorization Allows Disclosure of Member Repository Metadata via Group Repository Permissions",
      "x_generator": {
        "engine": "Vulnogram 1.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "103e4ec9-0a87-450b-af77-479448ddef11",
    "assignerShortName": "Sonatype",
    "cveId": "CVE-2026-77122",
    "datePublished": "2026-09-02T17:03:25.960Z",
    "dateReserved": "2026-08-20T13:00:25.162Z",
    "dateUpdated": "2026-09-02T17:47:07.777Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-77123 (GCVE-0-2026-77123)

Vulnerability from cvelistv5 – Published: 2026-09-02 17:03 – Updated: 2026-09-02 17:53

Title

Nexus Repository 3 - Webhook Secret Disclosure via Capability Read API

Summary

Nexus Repository 3 contains a sensitive information disclosure vulnerability in the capability read API. An account holding the nexus:capabilities:read privilege can retrieve the plaintext shared secret configured on a webhook capability, which is intended to be masked from all API responses. This issue affects Nexus Repository 3 versions 3.2.0 through 3.95.x, and is fixed in version 3.96.0.

Severity

6 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-02 17:49 UTC

CWE

CWE-201 - Insertion of Sensitive Information Into Sent Data

Assigner

Sonatype CNA under the mitre root

CNA scorecard B 90/100 over 35 records in the last 180 days details

References

2 references

URL	Tags
https://help.sonatype.com/en/sonatype-nexus-repos…	patch
https://support.sonatype.com/hc/en-us/articles/54…	vendor-advisory

Impacted products

1 product

Vendor	Product	Version
Sonatype	Nexus Repository 3	Affected: 3.2.0 , < 3.96.0 (semver) cpe:2.3:a:sonatype:nexus_repository_manager:3.2.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.2.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.3.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.3.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.3.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.4.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.5.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.5.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.5.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.6.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.6.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.6.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.7.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.7.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.8.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.9.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.10.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.11.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.12.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.12.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.13.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.14.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.15.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.15.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.15.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.16.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.16.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.16.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.17.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.18.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.18.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.19.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.19.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.20.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.20.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.21.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.21.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.21.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.22.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.22.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.23.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.24.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.25.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.25.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.26.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.26.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.27.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.28.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.28.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.29.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.29.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.30.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.30.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.31.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.31.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.32.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.32.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.33.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.33.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.34.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.34.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.35.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.36.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.37.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.38.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.38.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.39.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.40.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.40.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.41.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.41.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.42.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.43.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.44.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.45.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.45.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.46.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.47.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.48.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.49.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.50.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.51.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.52.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.53.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.53.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.54.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.54.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.55.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.56.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.57.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.58.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.59.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.60.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.61.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.62.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.63.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.64.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.65.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.66.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.67.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.68.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.68.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.69.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.70.5:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.71.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.72.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.73.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.74.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.75.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.75.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.76.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.76.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.77.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.78.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.79.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.79.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.80.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.81.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.81.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.82.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.82.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.83.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.84.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.85.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.85.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.86.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.87.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.88.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.89.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.89.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.90.5:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:::::::* cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:::::::*

Credits

Beni Saprulah (HackerOne: https://hackerone.com/bebensap, LinkedIn: https://www.linkedin.com/in/beni-saprulah)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-77123",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-02T17:49:51.852604Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-02T17:53:14.784Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.2.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.2.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.3.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.3.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.3.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.4.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.5.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.5.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.5.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.6.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.6.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.6.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.7.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.7.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.8.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.9.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.10.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.11.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.12.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.12.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.13.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.14.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.15.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.15.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.15.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.16.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.16.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.16.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.17.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.18.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.18.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.19.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.19.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.20.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.20.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.21.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.21.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.21.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.22.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.22.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.23.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.24.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.25.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.25.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.26.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.26.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.27.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.28.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.28.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.29.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.29.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.30.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.30.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.31.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.31.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.32.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.32.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.33.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.33.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.34.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.34.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.35.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.36.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.37.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.38.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.38.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.39.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.40.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.40.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.41.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.41.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.42.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.43.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.44.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.45.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.45.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.46.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.47.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.48.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.49.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.50.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.51.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.52.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.53.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.53.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.54.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.54.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.55.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.56.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.57.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.58.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.59.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.60.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.61.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.62.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.63.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.64.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.65.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.66.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.67.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.68.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.68.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.69.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.70.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.71.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.72.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.73.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.74.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.75.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.75.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.76.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.76.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.77.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.78.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.79.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.79.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.80.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.81.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.81.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.82.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.82.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.83.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.84.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.85.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.85.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.86.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.87.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.88.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.89.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.89.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.90.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.91.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.92.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.93.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.94.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:sonatype:nexus_repository_manager:3.95.2:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "Nexus Repository 3",
          "vendor": "Sonatype",
          "versions": [
            {
              "lessThan": "3.96.0",
              "status": "affected",
              "version": "3.2.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Beni Saprulah (HackerOne: https://hackerone.com/bebensap, LinkedIn: https://www.linkedin.com/in/beni-saprulah)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eNexus Repository 3 contains a sensitive information disclosure vulnerability in the capability read API. An account holding the \u003ccode\u003enexus:capabilities:read\u003c/code\u003e privilege can retrieve the plaintext shared secret configured on a webhook capability, which is intended to be masked from all API responses. This issue affects Nexus Repository 3 versions 3.2.0 through 3.95.x, and is fixed in version 3.96.0.\u003c/p\u003e"
            }
          ],
          "value": "Nexus Repository 3 contains a sensitive information disclosure vulnerability in the capability read API. An account holding the nexus:capabilities:read privilege can retrieve the plaintext shared secret configured on a webhook capability, which is intended to be masked from all API responses. This issue affects Nexus Repository 3 versions 3.2.0 through 3.95.x, and is fixed in version 3.96.0."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-201",
              "description": "CWE-201 Insertion of Sensitive Information Into Sent Data",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-02T17:03:25.742Z",
        "orgId": "103e4ec9-0a87-450b-af77-479448ddef11",
        "shortName": "Sonatype"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://help.sonatype.com/en/sonatype-nexus-repository-3-96-0-release-notes.html"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://support.sonatype.com/hc/en-us/articles/54639904174099/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Nexus Repository 3 - Webhook Secret Disclosure via Capability Read API",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "103e4ec9-0a87-450b-af77-479448ddef11",
    "assignerShortName": "Sonatype",
    "cveId": "CVE-2026-77123",
    "datePublished": "2026-09-02T17:03:25.742Z",
    "dateReserved": "2026-08-20T13:00:26.092Z",
    "dateUpdated": "2026-09-02T17:53:14.784Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Find a vulnerability

Search criteria

182 vulnerabilities by sonatype

CVE-2026-113374 (GCVE-0-2026-113374)

CVE-2026-113373 (GCVE-0-2026-113373)

CVE-2026-113372 (GCVE-0-2026-113372)

CVE-2026-113371 (GCVE-0-2026-113371)

CVE-2026-113370 (GCVE-0-2026-113370)

CVE-2026-113369 (GCVE-0-2026-113369)

CVE-2026-113368 (GCVE-0-2026-113368)

CVE-2026-97712 (GCVE-0-2026-97712)

CVE-2026-97667 (GCVE-0-2026-97667)

CVE-2026-97666 (GCVE-0-2026-97666)

CVE-2026-97665 (GCVE-0-2026-97665)

CVE-2026-77125 (GCVE-0-2026-77125)

CVE-2026-77124 (GCVE-0-2026-77124)

CVE-2026-77123 (GCVE-0-2026-77123)

CVE-2026-77122 (GCVE-0-2026-77122)

CVE-2026-77121 (GCVE-0-2026-77121)

CVE-2026-113368 (GCVE-0-2026-113368)

CVE-2026-113369 (GCVE-0-2026-113369)

CVE-2026-113370 (GCVE-0-2026-113370)

CVE-2026-113371 (GCVE-0-2026-113371)

CVE-2026-113372 (GCVE-0-2026-113372)

CVE-2026-113373 (GCVE-0-2026-113373)

CVE-2026-113374 (GCVE-0-2026-113374)

CVE-2026-97712 (GCVE-0-2026-97712)

CVE-2026-97667 (GCVE-0-2026-97667)

CVE-2026-97666 (GCVE-0-2026-97666)

CVE-2026-97665 (GCVE-0-2026-97665)

CVE-2026-77121 (GCVE-0-2026-77121)

CVE-2026-77122 (GCVE-0-2026-77122)

CVE-2026-77123 (GCVE-0-2026-77123)