CVE-2026-17593 | Sonatype Nexus Repository up to 3.94.x Configuration API code injection

SecurityVulns
Yanac

A vulnerability, which was classified as problematic, has been found in Sonatype Nexus Repository up to 3.94.x. The impacted element is an unknown function of the component Configuration API. This manipulation causes code injection.

This vulnerability is handled as CVE-2026-17593. The attack can be initiated remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More