CVE-2026-10741

MEDIUM

Sonatype Nexus Repository Manager < 3.93.0 - Proxy Credential Disclosure

Title source: manual
STIX 2.1

Description

Sonatype Nexus Repository Manager before 3.93.0 contains an authorization vulnerability in the proxy repository configuration that allows a delegated repository administrator to disclose stored upstream proxy credentials.

References (2)

Core 2

Scores

CVSS v3 4.9
EPSS 0.0024
EPSS Percentile 14.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-863
Status published
Products (2)
Sonatype/Nexus Repository Manager 3.1.0 - 3.93.0
sonatype/nexus_repository_manager 3.1.0 - 3.93.0
Published Jun 17, 2026
Tracked Since Jun 18, 2026