Nexus Repository — Vulnerabilities & Security Advisories 16

All 16 CVE vulnerabilities found in Nexus Repository, with AI-generated Chinese analysis, references, and POCs.

This page aggregates recorded security vulnerabilities affecting Sonatype's Nexus Repository, specifically those classified under the "Nexus Repository" product tag. It collects all known security flaws associated with this product, covering advisories and disclosures from recent years to the present day. Readers can use this resource to track the vendor's latest security updates, understand the specific weakness classes impacting the platform, and review the complete vulnerability history for this product.

Vendor: Sonatype

CVE ID	Title	CVSS	Severity	Published
CVE-2026-17593	Nexus Repository - Arbitrary Class Instantiation via Unsafe Realm Configuration CWE-470	7.2	High	2026-08-07
CVE-2026-7494	Nexus Repository - SSRF in SSL Certificate Retrieval CWE-918	-	-	2026-07-14
CVE-2026-10748	Nexus Repository 3 - Remote Code Execution via License Deserialization CWE-502	-	-	2026-06-16
CVE-2026-7308	Nexus Repository 3 - Stored Cross-Site Scripting (XSS) via HTML Browse Page CWE-79	-	-	2026-05-11
CVE-2026-3048	Nexus Repository 3 - Improper LDAP Referral Handling CWE-502	-	-	2026-05-11
CVE-2026-5189	Nexus Repository 3 - Hardcoded Credential in Internal Database Component CWE-798	9.8	-	2026-04-15
CVE-2026-3199	Nexus Repository 3 - Authenticated Remote Code Execution via Task Property Injection CWE-502	7.2^AI	High ^AI	2026-04-08
CVE-2026-3438	Nexus Repository 3 - Reflected Cross-Site Scripting (XSS) in ?describe Pages CWE-79	6.1^AI	Medium ^AI	2026-04-08
CVE-2026-0600	Nexus Repository 3 - Server-Side Request Forgery in Proxy Repository Configuration CWE-918	4.9^AI	Medium ^AI	2026-01-14
CVE-2026-0601	Nexus Repository 3 - Cross-Site Scripting CWE-79	6.1^AI	Medium ^AI	2026-01-14
CVE-2025-13488	Nexus Repository 3 - Stored Cross-Site Scripting (XSS) CWE-79	4.8^AI	Medium ^AI	2025-12-04
CVE-2025-9868	Nexus Repository 2 - SSRF Vulnerability in Remote Browser Plugin CWE-918	7.5^AI	High ^AI	2025-10-08
CVE-2024-5082	Nexus Repository 2 - Remote Code Execution CWE-94	7.2	-	2024-11-14
CVE-2024-5083	Nexus Repository 2 - Stored XSS CWE-79	4.8	-	2024-11-14
CVE-2024-5764	Nexus Repository 3 - Static hard-coded encryption passphrase used by default CWE-798	7.2^AI	High ^AI	2024-10-23
CVE-2024-4956	Nexus Repository 3 - Path Traversal CWE-22	7.5	High	2024-05-16

All 16 known CVE vulnerabilities affecting Nexus Repository with full Chinese analysis, references, and POCs where available.