Exploited: 178
LatestCVE-2026-54384 — VitaFit Cloud API Authentication Bypass via POST /front/login/sns/
VulnFeed.org
AREN

Sonatype Nexus Repository vulnerabilities and fixes

Exploited and high-severity Sonatype Nexus Repository vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.

RSS for this product
  1. 8.6CVE-2026-113374Nexus Repository 3 - Privilege Escalation via Rut Auth Capability CreationFix availableSonatype Nexus Repository 3
    1 min read
  2. 7.7CVE-2026-113370Nexus Repository 3 - SQL Injection in Reindex Search by Pattern TaskFix availableSonatype Nexus Repository 3
    1 min read
  3. 7.1CVE-2026-113371Nexus Repository 3 - Insufficiently Protected Credentials in Repository Signing PassphraseFix availableSonatype Nexus Repository 3
    1 min read
  4. 7.1CVE-2026-113372Nexus Repository 3 - Insufficiently Protected Credentials in YUM Repository Signing KeyFix availableSonatype Nexus Repository 3
    1 min read
  5. 9.1CVE-2026-113373Nexus Repository 3 - Disabled or Locked Single Sign-On Users Can Sign In AgainFix availableSonatype Nexus Repository 3
    1 min read
Esc