Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-3329

Nexus Repository Manager - Improper Restriction of Excessive Authentication Attempts

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Sonatype

Description

A remote unauthenticated attacker may be able to conduct credential-guessing attacks against user accounts in Sonatype Nexus Repository via authentication endpoints.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Sonatype Nexus Repository Manager

Default version status: unaffected

  • 3.0.0 to < 3.93.0affected

References