VULNERABILITY INTELLIGENCE

CVE-2026-10741

CVSS score4.9 MEDIUM
EPSS probability0.27%
CISA KEVNot currently listed
Published2026-06-17
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Description

Sonatype Nexus Repository Manager before 3.93.0 contains an authorization vulnerability in the proxy repository configuration that allows a delegated repository administrator to disclose stored upstream proxy credentials.

Weakness classification

  • 103e4ec9-0a87-450b-af77-479448ddef11: CWE-863

Primary references