CVE-2026-3048 Nexus Repository 3 - Improper LDAP Referral Handling
Authenticated administrators can trigger unintended server-side connections via malicious LDAP referrals, potentially exposing internal services.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-3048?
CVE-2026-3048 is a medium-severity server-side request forgery vulnerability in Sonatype Nexus Repository Manager, published on 11 May 2026. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
An authenticated administrator who configures or tests LDAP connectivity in Sonatype Nexus Repository Manager versions 3.0.0 through 3.91.1 may be able to initiate unintended server-side connections when interacting with a malicious LDAP server.
Which versions are affected by CVE-2026-3048?
It affects 1 product.
Products include Sonatype Nexus Repository Manager.
How do I fix CVE-2026-3048?
No fix has been published for CVE-2026-3048 yet. Limit exposure of the affected software until one is available.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2026-3048 being exploited?
There is no known exploitation of CVE-2026-3048 in the wild and no public exploit code.
Other vulnerabilities in Sonatype Nexus Repository Manager
- CVE-2019-7238 Sonatype Nexus Repository Manager Incorrect Access Control
- CVE-2019-9629 Hardcoded credentials in n/a
- CVE-2017-17717 Hardcoded credentials in n/a
- CVE-2026-3199 Nexus Repository 3 - Authenticated Remote Code Execution via Task Property Injection
- CVE-2026-5189 Nexus Repository 3 - Hardcoded Credential in Internal Database Component
Sources
Also known as GHSA-q3x4-wr9j-7qg3.