CVE-2026-5189 | Sonatype Nexus Repository Manager up to 3.70.5 Configuration hard-coded credentials

April 16, 2026 Yanac

A vulnerability, which was classified as critical, was found in Sonatype Nexus Repository Manager up to 3.70.5. The affected element is an unknown function of the component Configuration Handler. Executing a manipulation can lead to hard-coded credentials.

The identification of this vulnerability is CVE-2026-5189. The attack may be launched remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More