CVE-2026-3329

Katalog CVE

CVSS 7.5 · High EPSS 0,63%

Kerentanan Improper Restriction of Excessive Authentication Attempts pada sonatype nexus repository manager. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

A remote unauthenticated attacker may be able to conduct credential-guessing attacks against user accounts in Sonatype Nexus Repository via authentication endpoints.

Rincian

Terbit di NVD

11 Juni 2026

Terakhir diubah

21 Juli 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-307: Improper Restriction of Excessive Authentication Attempts

EPSS (30 hari)

0,63% peluang dieksploitasi; lebih tinggi dari 48,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.sonatype.com/hc/en-us/articles/52482870409491 advisory vendor
• https://help.sonatype.com/en/sonatype-nexus-repository-3-93-0-release-notes.html release notes