Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2026-10741

Nexus Repository Manager - Incorrect Authorization allows credential disclosure via proxy repository configuration

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Sonatype

Description

Sonatype Nexus Repository Manager before 3.93.0 contains an authorization vulnerability in the proxy repository configuration that allows a delegated repository administrator to disclose stored upstream proxy credentials.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Sonatype Nexus Repository Manager

Default version status: unaffected

  • 3.1.0 to < 3.93.0affected

References