High · 8.7 CVE-2026-3329 EUVD-2026-36268GHSA-pfx2-jf85-mvf2

Nexus Repository Manager - Improper Restriction of Excessive Authentication Attempts

Published Jun 11, 2026 · Updated Jun 11, 2026 · Assigned by Sonatype

Vendor: Sonatype Product: Nexus Repository Manager

Description

A remote unauthenticated attacker may be able to conduct credential-guessing attacks against user accounts in Sonatype Nexus Repository via authentication endpoints.

Affected products

Vendor	Product	Affected	Fixed
Sonatype	Nexus Repository Manager	3.0.0 – < 3.93.0	3.93.0

Advisories 1

WID-SEC-2026-1905 Sonatype Nexus Repository Manager: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Jun 11, 2026

References

https://help.sonatype.com/en/sonatype-nexus-repository-3-93-0-release-notes.html patch
https://support.sonatype.com/hc/en-us/articles/52482870409491 vendor-advisory