# Sonatype vulnerabilities Source: https://junglewise.ai/threats/vendors/sonatype Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 12 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/sonatype.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 37 vulnerabilities in Sonatype: 0 in the last 7 days and 17 in the last 90 days, 4 of them critical and 2 exploited in the wild. The most recent, CVE-2026-113374, was published on 4 November 2026. 11 vulnerabilities in the last four weeks, up 1000% on the four before (1). 0 critical against 1. 3 technologies have a page of their own. ## Counts - Last 7 days: 0 - Last 30 days: 11 - Last 90 days: 17 - All time: 37 (4 critical, 2 exploited in the wild) ## About Sonatype A software company specializing in software supply chain automation and security. ## Latest Sonatype vulnerabilities - [CVE-2026-113374: Sonatype Nexus Repository 3 authorization bypass in Rut Auth capability](https://junglewise.ai/threats/cve-2026-113374-sonatype-nexus-repository-3-does-not-require-realm) (info, published 4 Nov 2026) - [CVE-2026-113373: Sonatype Nexus Repository 3 Pro account status bypass in SAML/OAuth2](https://junglewise.ai/threats/cve-2026-113373-sonatype-nexus-repository-3-pro-does-not-check-the-local-account) (info, published 4 Nov 2026) - [CVE-2026-113372: Sonatype Nexus Repository 3 YUM private key disclosure to read-only accounts](https://junglewise.ai/threats/cve-2026-113372-sonatype-nexus-repository-3-returns-the-private-signing-key-of-a) (info, published 4 Nov 2026) - [CVE-2026-113371: Sonatype Nexus Repository 3 signing passphrase disclosure in REST endpoint](https://junglewise.ai/threats/cve-2026-113371-sonatype-nexus-repository-3-returns-the-signing-passphrase-of-an) (info, published 4 Nov 2026) - [CVE-2026-113370: Sonatype Nexus Repository 3 SQL injection in Reindex Search Tables task](https://junglewise.ai/threats/cve-2026-113370-sonatype-nexus-repository-3-contains-a-sql-injection) (info, published 4 Nov 2026) - [CVE-2026-113369: Sonatype Nexus Repository stored XSS in OCI manifest artifact type](https://junglewise.ai/threats/cve-2026-113369-sonatype-nexus-repository-3-allows-a-user-account-that-can-push) (info, published 4 Nov 2026) - [CVE-2026-113368: Sonatype Nexus Repository 3 privilege escalation via unauthorized repository access](https://junglewise.ai/threats/cve-2026-113368-sonatype-nexus-repository-3-does-not-check-that-a-user-account) (info, published 4 Nov 2026) - [CVE-2026-97712: Sonatype Nexus Repository 3 privilege escalation in role management](https://junglewise.ai/threats/cve-2026-97712-sonatype-nexus-repository-3-allows-a-user-that-holds-the-role) (info, published 15 Oct 2026) - [CVE-2026-97667: Sonatype Nexus Repository 3 stored cross-site scripting in R repository metadata](https://junglewise.ai/threats/cve-2026-97667-sonatype-nexus-repository-3-allows-a-user-account-that-holds-the) (info, published 15 Oct 2026) - [CVE-2026-97666: Sonatype Nexus Repository 3 information disclosure via ExtDirect](https://junglewise.ai/threats/cve-2026-97666-sonatype-nexus-repository-3-allows-an-unauthenticated-remote) (info, published 15 Oct 2026) - [CVE-2026-97665: Sonatype Nexus Repository NuGet symbol upload authorization bypass](https://junglewise.ai/threats/cve-2026-97665-a-missing-authorization-check-in-nexus-repository-3-s-nuget) (info, published 15 Oct 2026) - [CVE-2026-107282: AsyncHttpClient cross-host replay sends credentials to wrong host](https://junglewise.ai/threats/cve-2026-107282-asynchttpclient-replay-to-a-different-host-sends-the-original) (critical, CVSS 4, published 8 Oct 2026) - [CVE-2026-77125: Sonatype Nexus Repository authorization bypass in blobstore management](https://junglewise.ai/threats/cve-2026-77125-sonatype-nexus-repository-authorization-bypass-in-blobstore) (high, CVSS 7.1, published 2 Sep 2026) - [CVE-2026-77124: Sonatype Nexus Repository privilege escalation in script execution](https://junglewise.ai/threats/cve-2026-77124-sonatype-nexus-repository-privilege-escalation-in-script) (high, CVSS 7.2, published 2 Sep 2026) - [CVE-2026-77123: Sonatype Nexus Repository 3 sensitive information disclosure in capability API](https://junglewise.ai/threats/cve-2026-77123-sonatype-nexus-repository-3-sensitive-information-disclosure-in) (medium, CVSS 6.5, published 2 Sep 2026) - [CVE-2026-77122: Sonatype Nexus Repository authorization bypass in REST API](https://junglewise.ai/threats/cve-2026-77122-sonatype-nexus-repository-authorization-bypass-in-rest-api) (medium, CVSS 4.3, published 2 Sep 2026) - [CVE-2026-77121: Sonatype Nexus Repository denial of service via oversized POM metadata](https://junglewise.ai/threats/cve-2026-77121-sonatype-nexus-repository-denial-of-service-via-oversized-pom) (info, published 2 Sep 2026) - [CVE-2026-17603: Nexus Repository 3 did not sufficiently restrict which HikariCP connection-pool properties could be set through the…](https://junglewise.ai/threats/cve-2026-17603-nexus-repository-3-did-not-sufficiently-restrict-which-hikaricp) (high, CVSS 8.8, published 7 Aug 2026) - [CVE-2026-17601: A user holding a permission to update privilege definitions could modify a wildcard privilege already assigned to…](https://junglewise.ai/threats/cve-2026-17601-a-user-holding-a-permission-to-update-privilege-definitions-could) (high, CVSS 7.2, published 7 Aug 2026) - [CVE-2026-17600: Sonatype Nexus Repository 3 did not immediately terminate a user's active login session or revoke their cached…](https://junglewise.ai/threats/cve-2026-17600-sonatype-nexus-repository-3-did-not-immediately-terminate-a-user) (high, CVSS 8.8, published 7 Aug 2026) - [CVE-2026-17599: Nexus Repository 3 contained an endpoint used to change the administrator account password during initial onboarding…](https://junglewise.ai/threats/cve-2026-17599-nexus-repository-3-contained-an-endpoint-used-to-change-the) (high, CVSS 7.2, published 7 Aug 2026) - [CVE-2026-17598: Sonatype Nexus Repository 3 did not properly filter internal configuration keys from user-supplied task properties…](https://junglewise.ai/threats/cve-2026-17598-sonatype-nexus-repository-3-did-not-properly-filter-internal) (medium, CVSS 4.9, published 7 Aug 2026) - [CVE-2026-14646: Sonatype Nexus Repository 3 SSRF via proxy repository redirects](https://junglewise.ai/threats/cve-2026-14646-sonatype-nexus-repository-3-ssrf-via-proxy-repository-redirects) (info, CVSS 4.9, published 14 Jul 2026) - [CVE-2026-14645: Sonatype Nexus Repository 3 SSRF in Webhook Global capability](https://junglewise.ai/threats/cve-2026-14645-sonatype-nexus-repository-3-ssrf-in-webhook-global-capability) (info, CVSS 5.1, published 14 Jul 2026) - [CVE-2026-7494: Sonatype Nexus Repository 3 SSRF in SSL Certificate Retrieval endpoint](https://junglewise.ai/threats/cve-2026-7494-sonatype-nexus-repository-3-ssrf-in-ssl-certificate-retrieval) (info, CVSS 5.3, published 14 Jul 2026) ## Most severe Sonatype vulnerabilities - [CVE-2019-7238: Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability](https://junglewise.ai/threats/cve-2019-7238-sonatype-nexus-repository-manager-incorrect-access-control) (critical, exploited in the wild, CVSS 9.8, published 10 Dec 2021) - [CVE-2020-10199: Nexus Repository Manager 3 - Remote Code Execution](https://junglewise.ai/threats/cve-2020-10199-sonatype-nexus-repository-remote-code-execution-vulnerability) (critical, exploited in the wild, CVSS 3.1, published 14 Apr 2020) - [CVE-2026-5189: CWE-798: Use of Hard-coded Credentials in Sonatype Nexus Repository Manager versions 3.0.0 through 3.70.5 allows an…](https://junglewise.ai/threats/cve-2026-5189-cwe-798-use-of-hard-coded-credentials-in-sonatype-nexus-repository) (critical, CVSS 9.8, published 15 Apr 2026) - [CVE-2026-107282: AsyncHttpClient cross-host replay sends credentials to wrong host](https://junglewise.ai/threats/cve-2026-107282-asynchttpclient-replay-to-a-different-host-sends-the-original) (critical, CVSS 4, published 8 Oct 2026) - [CVE-2026-17603: Nexus Repository 3 did not sufficiently restrict which HikariCP connection-pool properties could be set through the…](https://junglewise.ai/threats/cve-2026-17603-nexus-repository-3-did-not-sufficiently-restrict-which-hikaricp) (high, CVSS 8.8, published 7 Aug 2026) - [CVE-2026-17600: Sonatype Nexus Repository 3 did not immediately terminate a user's active login session or revoke their cached…](https://junglewise.ai/threats/cve-2026-17600-sonatype-nexus-repository-3-did-not-immediately-terminate-a-user) (high, CVSS 8.8, published 7 Aug 2026) - [CVE-2026-77124: Sonatype Nexus Repository privilege escalation in script execution](https://junglewise.ai/threats/cve-2026-77124-sonatype-nexus-repository-privilege-escalation-in-script) (high, CVSS 7.2, published 2 Sep 2026) - [CVE-2026-17599: Nexus Repository 3 contained an endpoint used to change the administrator account password during initial onboarding…](https://junglewise.ai/threats/cve-2026-17599-nexus-repository-3-contained-an-endpoint-used-to-change-the) (high, CVSS 7.2, published 7 Aug 2026) - [CVE-2026-17601: A user holding a permission to update privilege definitions could modify a wildcard privilege already assigned to…](https://junglewise.ai/threats/cve-2026-17601-a-user-holding-a-permission-to-update-privilege-definitions-could) (high, CVSS 7.2, published 7 Aug 2026) - [CVE-2026-77125: Sonatype Nexus Repository authorization bypass in blobstore management](https://junglewise.ai/threats/cve-2026-77125-sonatype-nexus-repository-authorization-bypass-in-blobstore) (high, CVSS 7.1, published 2 Sep 2026) ## Vulnerabilities per week 11 vulnerabilities in the last four weeks, up 1000% on the four before (1). 0 critical against 1. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 5 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 1 | 1 | 0 | | 12 Oct 2026 | 4 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 7 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Sonatype technologies - [Sonatype Nexus Repository 3](https://junglewise.ai/threats/technologies/nexus-repository-3): 16 vulnerabilities - [Sonatype Nexus Repository Manager](https://junglewise.ai/threats/technologies/nexus-repository-manager): 15 vulnerabilities - [Sonatype Nexus Repository](https://junglewise.ai/threats/technologies/nexus-repository): 8 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Sonatype vulnerabilities", https://junglewise.ai/threats/vendors/sonatype, 12 November 2026.