CVE-2026-10741: Sonatype Nexus Repository Manager

Medium severity, CVSS 4.9. EPSS: 0.3% chance of exploitation in the next 30 days.

Sonatype Nexus Repository Manager before 3.93.0 contains an authorization vulnerability in the proxy repository configuration that allows a delegated repository administrator to disclose stored upstream proxy credentials.

Affected products

• Sonatype Nexus Repository Manager: from 3.1.0, before 3.93.0 (fixed in 3.93.0)

Published 2026-06-17. Last modified 2026-07-21.