Medium · 5.9 CVE-2026-10741 EUVD-2026-37783GHSA-qqcv-fjfg-8rp6

Nexus Repository Manager - Incorrect Authorization allows credential disclosure via proxy repository configuration

Published Jun 17, 2026 · Updated Jun 17, 2026 · Assigned by Sonatype

Vendor: Sonatype Product: Nexus Repository Manager

Description

Sonatype Nexus Repository Manager before 3.93.0 contains an authorization vulnerability in the proxy repository configuration that allows a delegated repository administrator to disclose stored upstream proxy credentials.

Affected products

Vendor	Product	Affected	Fixed
Sonatype	Nexus Repository Manager	3.1.0 – < 3.93.0	3.93.0

Advisories 1

WID-SEC-2026-1987 Sonatype Nexus Repository Manager: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Jun 17, 2026

References

https://help.sonatype.com/en/sonatype-nexus-repository-3-93-0-release-notes.html patch
https://support.sonatype.com/hc/en-us/articles/52341191736851 vendor-advisory

CNA	v4.0	5.9
EUVD	v4.0	5.9