← Database

CVE-2026-3329

HIGH CVSS: 7.5 Published: 2026-06-11 Modified: 2026-07-21

Description

A remote unauthenticated attacker may be able to conduct credential-guessing attacks against user accounts in Sonatype Nexus Repository via authentication endpoints.

Affected Platforms

Sonatype Nexus Repository Manager

Weakness Type

CWE-307

References