Sonatype has 37 CVEs on record between 2020 and 2026. Disclosure cadence is accelerating: 20 in the last 90 days against 8 in the 90 before. The busiest recent month was August 2026 with 11. The median CVSS is 6.9 (medium), with 1 rated critical. None have a confirmed exploitation report. The dominant weakness classes are CWE-79 (6) and CWE-863 (5). Most affected products: nexus_repository_manager (33), Nexus Repository 3 (4).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.9
- Publish → KEV
- —
- Last 90 days
- 20 prev 8
Products
- nexus_repository_manager 33
- Nexus Repository 3 4
Worst active — by depth score
CVE-2026-5189Critical· 9.8CWE-798: Use of Hard-coded Credentials in Sonatype Nexus Repository Manager versions 3.0.0 through 3.70.5 allows an unauthenticated attacker with network access to gain unauthorized read/write access to the internal database and execute …54CVE-2026-3199High· 8.8A vulnerability in the task management component of Sonatype Nexus Repository versions 3.22.1 through 3.90.2 allows an authenticated attacker with task creation permissions to execute arbitrary code, bypassing the nexus.scripts.allowCrea…49CVE-2020-15871High· 8.8Sonatype Nexus Repository Manager OSS/Pro version before 3.25.1 allows Remote Code Execution.49CVE-2020-11753High· 8.8An issue was discovered in Sonatype Nexus Repository Manager in versions 3.21.1 and 3.22.049CVE-2026-97712High· 8.7Sonatype Nexus Repository 3 allows a user that holds the role create or role update permission to grant roles and privileges that the account does not hold48
Sonatype vulnerabilities
CVEs affecting Sonatype, newest first. Open any entry for full detail, references, and exploit status.
37 CVEsRSS
CVE-2026-3199High· 8.8A vulnerability in the task management component of Sonatype Nexus Repository versions 3.22.1 through 3.90.2 allows an authenticated attacker with task creation permissions to execute arbitrary code, bypassing the nexus.scripts.allowCrea…
A vulnerability in the task management component of Sonatype Nexus Repository versions 3.22.1 through 3.90.2 allows an authenticated attacker with task creation permissions to execute arbitrary code, bypassing the nexus.scripts.allowCrea…
CVE-2021-40143High· 8.2Sonatype Nexus Repository 3.x through 3.33.1-01 is vulnerable to an HTTP header injection
Sonatype Nexus Repository 3.x through 3.33.1-01 is vulnerable to an HTTP header injection. By sending a crafted HTTP request, a remote attacker may disclose sensitive information or request external resources from a vulnerable instance.
CVE-2021-29158Medium· 4.9Sonatype Nexus Repository Manager 3 Pro up to and including 3.30.0 has Incorrect Access Control.
Sonatype Nexus Repository Manager 3 Pro up to and including 3.30.0 has Incorrect Access Control.
CVE-2020-15871High· 8.8Sonatype Nexus Repository Manager OSS/Pro version before 3.25.1 allows Remote Code Execution.
Sonatype Nexus Repository Manager OSS/Pro version before 3.25.1 allows Remote Code Execution.
CVE-2020-15870Medium· 6.1Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS (Issue 2 of 2).
Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS (Issue 2 of 2).
CVE-2020-15869Medium· 5.4Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS (issue 1 of 2).
Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS (issue 1 of 2).
CVE-2020-11753High· 8.8An issue was discovered in Sonatype Nexus Repository Manager in versions 3.21.1 and 3.22.0
An issue was discovered in Sonatype Nexus Repository Manager in versions 3.21.1 and 3.22.0. It is possible for a user with appropriate privileges to create, modify, and execute scripting tasks without use of the UI or API. NOTE: in 3.22.…