Sonatype

Vulnerability activity for Sonatype: what is being exploited, what was published lately, and when the next patch release is due.

All vendors Open in the dashboard

Last 30 days

CVEs: 0
Critical (CVSS 9+): 0
Exploited (CISA KEV): 0
With exploit code: 0

Last 90 days

CVEs: 5
Critical (CVSS 9+): 0
Exploited (CISA KEV): 0
With exploit code: 0

Last 365 days

CVEs: 6
Critical (CVSS 9+): 0
Exploited (CISA KEV): 0
With exploit code: 0

Exploited now

CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.

9.8CriticalMar 21, 2019Sonatype Nexus Repository Manager Auth bypass / access controlCVE-2019-7238Sonatype Nexus Repository Manager before 3.15.0 has an incorrect access control vulnerability. Exploitation allows for remote code execution.Added to KEV Dec 10, 2021 · 994 days after publicationExploited77% likelyExploit codeNucleiDetection
8.8HighApr 1, 2020Sonatype Nexus Repository Code / command injectionCVE-2020-10199Sonatype Nexus Repository contains an unspecified vulnerability that allows for remote code execution.Added to KEV Nov 3, 2021 · 580 days after publicationExploited99% likelyExploit codeExploit-DB · Metasploit · NucleiDetection

Recent

8.8HighAug 7, 2026Sonatype nexus repository manager Code / command injectionCVE-2026-17603Nexus Repository 3 did not sufficiently restrict which HikariCP connection-pool properties could be set through the DataStore configuration API. A user holding the nx-datastores-update permission could set the connectionInitSql property to execute arbitrary SQL against the configured database on every new connection. On the default H2 database backend, this could be leveraged to achieve remote code execution as the Nexus process user.
7.2HighAug 7, 2026Sonatype nexus repository manager Auth bypass / access controlCVE-2026-17601A user holding a permission to update privilege definitions could modify a wildcard privilege already assigned to their own role to grant broader permissions than they were authorized to hold, including full administrative access, without any additional authorization check or role reassignment.
8.8HighAug 7, 2026Sonatype nexus repository managerCVE-2026-17600Sonatype Nexus Repository 3 did not immediately terminate a user's active login session or revoke their cached permissions when that user's account was deleted, deactivated, or had its password changed. A user whose account was already logged in at the time of one of these actions could continue using their existing session to interact with the repository as though the account were still active, until that session independently expired. Depending on the permissions previously held, this could al
7.2HighAug 7, 2026Sonatype nexus repository managerCVE-2026-17599Nexus Repository 3 contained an endpoint used to change the administrator account password during initial onboarding. This endpoint did not verify that onboarding was still in progress before allowing the password change, relying instead on the presence of a local onboarding artifact. As a result, an account holding the nexus:* permission could invoke the endpoint outside the intended onboarding flow to replace the administrator password, and existing sessions were not invalidated after the chan
4.9MediumAug 7, 2026Sonatype nexus repository managerCVE-2026-17598Sonatype Nexus Repository 3 did not properly filter internal configuration keys from user-supplied task properties when creating or updating a scheduled task through the administrative UI. An account holding permission to create at least one scheduled task type could supply a crafted property value that caused the system to overwrite the configuration of an unrelated, existing task instead of creating a new one.
7.5HighJul 14, 2026Sonatype nexus repository managerCVE-2026-11403A vulnerability in Sonatype Nexus Repository Manager's format-specific API key generation may allow a remote attacker to gain unauthorized access to repository operations as a targeted user. A format-specific API key realm (NuGet API Key, Docker Bearer Token, or npm Bearer Token) must be enabled and the targeted user must have an active API key for this vulnerability to be exploitable.
9.8CriticalMar 21, 2019Sonatype Nexus Repository Manager Auth bypass / access controlCVE-2019-7238Sonatype Nexus Repository Manager before 3.15.0 has an incorrect access control vulnerability. Exploitation allows for remote code execution.Exploited77% likelyExploit codeNucleiDetection
8.8HighApr 1, 2020Sonatype Nexus Repository Code / command injectionCVE-2020-10199Sonatype Nexus Repository contains an unspecified vulnerability that allows for remote code execution.Exploited99% likelyExploit codeExploit-DB · Metasploit · NucleiDetection

See every Sonatype entry on the dashboard.