Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-17593— Nexus Repository - Arbitrary Class Instantiation via Unsafe Realm Configuration

CVSS 7.2 · High EPSS 0.31% · P23

Affected Version Matrix 1

VendorProductVersion RangeStatus
SonatypeNexus Repository2.8.0< 3.95.0affected
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2026-17593

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Nexus Repository - Arbitrary Class Instantiation via Unsafe Realm Configuration
Source: CVE Program / CVE List V5
Vulnerability Description
An account holding the nexus:settings:update permission in Nexus Repository 3 (or the equivalent nexus:settings permission in the legacy Nexus Repository 2) could submit arbitrary values as realm identifiers through an internal configuration API that did not validate them against the set of registered realms. Because unrecognized entries were persisted and re-evaluated on every realm load via a legacy code path, this could result in unintended code executing inside the Nexus Repository process, and in some cases a persistent authentication lockout that was not visible through the administrative UI.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
使用外部可控制的输入来选择类或代码(不安全的反射)
Source: CVE Program / CVE List V5
Vulnerability Title
Sonatype Nexus Repository Manager 代码注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Sonatype Nexus Repository Manager是美国Sonatype公司的一个软件仓库管理平台。 Sonatype Nexus Repository Manager 2.8.0至3.95.0之前版本存在代码注入漏洞，该漏洞源于内部配置API未对realm标识符进行有效验证，可能导致意外代码执行和持久认证锁定。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
SonatypeNexus Repository 2.8.0 ~ 3.95.0 cpe:2.3:a:sonatype:nexus_repository_manager:2.8.0:*:*:*:*:*:*:*

II. Public POCs for CVE-2026-17593

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-17593

请登录查看更多情报信息。

Vendor Pages for CVE-2026-17593 (2)

Same Patch Batch · Sonatype · 2026-08-07 · 11 CVEs total

CVE-2026-176018.9 HIGHNexus Repository 3 - Wildcard Privilege Update Self-Escalation to Administrator
CVE-2026-176008.7 HIGHNexus Repository 3 - Session Not Invalidated on User Account Deletion or Deactivation
CVE-2026-176038.7 HIGHNexus Repository 3 - HikariCP connectionInitSql Injection RCE via DataStore Configuration
CVE-2026-146448.6 HIGHNexus Repository 3 - Privilege Escalation
CVE-2026-175948.2 HIGHNexus Repository 3 - Authorization Bypass in Repository Creation
CVE-2026-175996.9 MEDIUMNexus Repository 3 - Unverified Onboarding State on change-admin-password Endpoint
CVE-2026-175966.3 MEDIUMNexus Repository 3 - Stored Cross-Site Scripting (XSS) via Blob Store Name
CVE-2026-175985.3 MEDIUMNexus Repository 3 - Improper Input Validation in Scheduled Task Configuration
CVE-2026-175955.3 MEDIUMNexus Repository 3 - JEXL Content Selector Sandbox Property-Read Bypass
CVE-2026-175975.1 MEDIUMNexus Repository 3 - Server-Side Request Forgery via Email Configuration Verification

IV. Related Vulnerabilities

Same product: Nexus Repository
Same vendor: Sonatype
Same weakness: CWE-470

V. Comments for CVE-2026-17593

No comments yet

Leave a comment