Nexus by Sonatype is a repository manager that organizes, stores, and distributes artifacts needed for development. With Nexus, developers can completely control access to, and deployment of, every artifact in an organization from a single location, making it easier to distribute software.

Sonatype Nexus 3

Nexus by Sonatype is a repository manager that organizes, stores, and distributes artifacts needed for development. With Nexus, developers can completely control access to and deployment of every artifact in an organization from a single location, making it easier to distribute software.

Sonatype Nexus

A reflected cross-site scripting vulnerability exists in Sonatype Nexus Repository versions 3.0.0 through 3.90.2 that allows unauthenticated remote attackers to execute arbitrary JavaScript in a victim's browser through a specially crafted URL. Exploitation requires user interaction.

CVE-2026-3438

CVE ID	Severità	Punteggio	Tecnologie	Nome del componente	Exploit CISA KEV	Ha la correzione	Data di pubblicazione
CVE-2026-3199	CRITICAL	9.4	Sonatype Nexus 3	cpe:2.3:a:sonatype:nexus_repository_manager	No	Sì	Apr 08, 2026
CVE-2026-5189	CRITICAL	9.2	Sonatype Nexus 3	cpe:2.3:a:sonatype:nexus_repository_manager_3	No	Sì	Apr 15, 2026
CVE-2026-3438	MEDIUM	5.1	Sonatype Nexus 3	cpe:2.3:a:sonatype:nexus_repository_manager	No	Sì	Apr 08, 2026
CVE-2026-0601	MEDIUM	5.1	Sonatype Nexus 3	cpe:2.3:a:sonatype:nexus_repository_manager	No	Sì	Jan 14, 2026
CVE-2025-13488	MEDIUM	5.1	Sonatype Nexus 3	cpe:2.3:a:sonatype:nexus_repository_manager	No	Sì	Dec 04, 2025

CVE-2026-3438:
Sonatype Nexus 3 Analisi e mitigazione delle vulnerabilità

5.1

Imparentato Sonatype Nexus 3 Vulnerabilità:

Benchmark della tua posizione di sicurezza del cloud

Ulteriori risorse Wiz

PEACH

Pronti a vedere Wiz in azione?

CVE-2026-3438: Sonatype Nexus 3 Analisi e mitigazione delle vulnerabilità