CVE-2026-113368Medium· 5.3▾ SunlitSonatype Nexus Repository 3 does not check that a user account is authorized to access a repository before the repository is added as a member of a group repository. A user account that has signed in with valid credentials and holds the …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Nov 6.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.2%
Sonatype Nexus Repository 3 does not check that a user account is authorized to access a repository before the repository is added as a member of a group repository. A user account that has signed in with valid credentials and holds the add or edit privilege on a group repository can add a repository that the account cannot read or browse, and then read the content of that repository through the group. The anonymous user can only do this if an administrator has explicitly granted it that privilege.
nexus_repository_3 >= 3.0.0 < 3.98.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-113374High· 8.6Nexus Repository 3 - Privilege Escalation via Rut Auth Capability Creation
CVE-2026-113371High· 7.1Nexus Repository 3 - Insufficiently Protected Credentials in Repository Signing Passphrase
CVE-2026-113369Medium· 6.3Nexus Repository 3 - Stored Cross-Site Scripting in OCI Attestations Tab
CVE-2026-113370High· 7.7Nexus Repository 3 - SQL Injection in Reindex Search by Pattern Task
CVE-2026-113372High· 7.1Nexus Repository 3 - Insufficiently Protected Credentials in YUM Repository Signing Key
CVE-2026-113373Critical· 9.1Nexus Repository 3 - Disabled or Locked Single Sign-On Users Can Sign In Again