Sonatype Nexus Repository Manager vulnerabilities
64 published vulnerabilities in Sonatype Nexus Repository Manager, 1 of them exploited in the wild. The most were published in 2026 (29), and 29 so far in 2026.
Sonatype Nexus Repository Manager vulnerabilities by year
2017
2018
2019
2020
2021
2022
2024
2026
Most exploited Sonatype Nexus Repository Manager vulnerabilities
- CVE-2019-7238 Sonatype Nexus Repository Manager Incorrect Access Control
- CVE-2019-9629 Hardcoded credentials in n/a
- CVE-2017-17717 Hardcoded credentials in n/a
- CVE-2026-3199 Nexus Repository 3 - Authenticated Remote Code Execution via Task Property Injection
- CVE-2026-5189 Nexus Repository 3 - Hardcoded Credential in Internal Database Component
- CVE-2026-17601 Nexus Repository 3 - Wildcard Privilege Update Self-Escalation to Administrator
- CVE-2020-15871 Code injection in n/a
- CVE-2020-11753 Missing authorization in n/a
- CVE-2019-5475 OS Command Injection in Nexus Yum Repository Plugin
- CVE-2026-17600 Nexus Repository 3 - Session Not Invalidated on User Account Deletion or Deactivation
- CVE-2026-17603 Nexus Repository 3 - HikariCP connectionInitSql Injection RCE via DataStore Configuration API
- CVE-2026-11403 Nexus Repository Manager - Insufficient Entropy in Format-Specific API Key Generation
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.