Vulnerability in Sonatype Nexus Repository

CVE-2026-5189

CWE-798: Use of Hard-coded Credentials in Sonatype Nexus Repository Manager versions 3.0.0 through 3.70.5 allows an unauthenticated attacker with network access to gain unauthorized read/write access to the internal database and execute ar…

EPSS: 0.005 (37.2th percentile) — read the EPSS interpretation.