WID-SEC-W-2026-1905

DeutschShown in its original language — a full translation is planned for a future version.

Sonatype Nexus Repository Manager: Schwachstelle ermöglicht Offenlegung von Informationen

view advisory published 2026-06-11

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Sonatype Nexus Repository Manager ausnutzen, um Informationen offenzulegen, was potenziell weitere Angriffe ermöglicht.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2026-3329US	high7.5	0.45% (39th)	—	2026-06-11
A remote unauthenticated attacker may be able to conduct credential-guessing attacks against user accounts in Sonatype Nexus Repository via authentication endpoints.

references

External citations — patches, advisories, analysis.

Sonatype Nexus Repository 3.93.0 Release Notes vom 2026-06-11external
Sonatype Security Advisory CVE-2026-3329 vom 2026-06-11external
WID-SEC-W-2026-1905 - CSAF Versionself
WID-SEC-2026-1905 - Portal Versionself

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan