Description

Sonatype Nexus Repository Manager before 3.93.0 contains an authorization vulnerability in the proxy repository configuration that allows a delegated repository administrator to disclose stored upstream proxy credentials.

Remediation

References

CVE-2026-10741

Related Vulnerabilities

WebLogic CVE-2021-2075 Vulnerability (CVE-2021-2075)

Elgg Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-4072)

WordPress Plugin Auto Publish for Google My Business Cross-Site Scripting (3.3)

WordPress Plugin Active Products Tables for WooCommerce. Best and Professional products tables for WooCommerce store Cross-Site Scripting (1.0.3.1)

MODX CVE-2017-7323 Vulnerability (CVE-2017-7323)

Severity

Medium

Classification

CVE-2026-10741 CWE-863 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities