CVE-2026-5189

EUVD-2026-23031
CWE-798: Use of Hard-coded Credentials in Sonatype Nexus Repository Manager versions 3.0.0 through 3.70.5 allows an unauthenticated attacker with network access to gain unauthorized read/write access to the internal database and execute arbitrary OS commands as the Nexus process user. Exploitation requires the non-default nexus.orient.binaryListenerEnabled=true configuration to be enabled.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 48.07%
Affected Products (NVD)
VendorProductVersion
sonatypenexus_repository_manager
3.0.0 ≤
𝑥
< 3.71.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://help.sonatype.com/en/sonatype-nexus-repository-3-71-0-release-notes.html
https://support.sonatype.com/hc/en-us/articles/50817138825491