Is there a patch available for CVE-2026-10741?

Yes, a patch is available for CVE-2026-10741. Update the affected software to the latest version immediately.

Nexus Repository Manager CVE-2026-10741

Q: What is the CVSS score of CVE-2026-10741?

CVE-2026-10741 has a CVSS 4.0 base score of 5.9 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.3%.

MEDIUM

Incorrect Authorization (CWE-863)

2026-06-17 Sonatype

Authentication Bypass Nexus Repository Manager Sonatype

5.9

CVSS 4.0 · Vendor: Sonatype

Severity by source

Vendor (Sonatype) PRIMARY

5.9 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

3.0 LOW

High privileges (PR:H) and the required presence of a credentialed proxy repository (AC:H) tightly limit exploitation; scope changes to upstream systems justify S:C with bounded confidentiality impact.

3.1 AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N

4.0 AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N

Primary rating from Vendor (Sonatype).

CVSS VectorVendor: Sonatype

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jun 17, 2026 - 20:04 vuln.today

DescriptionCVE.org

Sonatype Nexus Repository Manager before 3.93.0 contains an authorization vulnerability in the proxy repository configuration that allows a delegated repository administrator to disclose stored upstream proxy credentials.

AnalysisAI

Incorrect authorization in Sonatype Nexus Repository Manager before 3.93.0 permits a delegated repository administrator to read stored upstream proxy credentials beyond their intended authorization scope. The flaw resides in the proxy repository configuration pathway, where role-scoped administrators can retrieve credentials that should be restricted to higher-privilege system-level accounts. No public exploit code has been identified and the vulnerability is not listed in CISA KEV, though the high confidentiality impact on stored upstream credentials is notable given that exposure enables potential unauthorized access to private upstream artifact repositories.

Technical ContextAI

Sonatype Nexus Repository Manager (CPE: cpe:2.3:a:sonatype:nexus_repository_manager:*:*:*:*:*:*:*:*) supports proxy repository configurations that authenticate against private upstream artifact sources - such as private npm, Maven, or Docker registries - using stored credentials. The vulnerability is classified as CWE-863 (Incorrect Authorization), meaning the system fails to enforce adequate permission checks when a delegated repository administrator accesses the proxy repository configuration. Nexus supports a delegated administration model where administrators can be scoped to specific repositories rather than the entire instance; however, the authorization logic incorrectly permits such scoped administrators to retrieve upstream proxy credentials that should be restricted to full system administrators. The tag 'Authentication Bypass' in the source intelligence appears to be a broad categorization - the root cause per CWE-863 is improper authorization enforcement rather than authentication bypass.

RemediationAI

Upgrade to Sonatype Nexus Repository Manager version 3.93.0 or later, which contains the authorization fix confirmed by the vendor release notes at https://help.sonatype.com/en/sonatype-nexus-repository-3-93-0-release-notes.html and the associated support advisory at https://support.sonatype.com/hc/en-us/articles/52341191736851. If immediate upgrade is not feasible, organizations should audit and reduce delegated repository administrator role assignments to the minimum necessary set of accounts, shrinking the population of principals capable of exploiting this flaw - though this is a risk reduction measure, not a fix. After upgrading, rotating all upstream proxy credentials configured in affected Nexus instances is strongly advisable to invalidate credentials that may have been disclosed prior to remediation.