CVE-2026-3048

UNKNOWN 0.0

Nexus Repository 3 - Improper LDAP Referral Handling

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

An authenticated administrator who configures or tests LDAP connectivity in Sonatype Nexus Repository Manager versions 3.0.0 through 3.91.1 may be able to initiate unintended server-side connections when interacting with a malicious LDAP server.

CWE	CWE-502 CWE-918
Vendor	sonatype
Product	nexus repository
Published	May 11, 2026
Last Updated	May 11, 2026

Stay Ahead of the Next One

Get instant alerts for sonatype nexus repository

Be the first to know when new unknown vulnerabilities affecting sonatype nexus repository are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Sonatype / Nexus Repository

3.0.0 < 3.92.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

help.sonatype.com: https://help.sonatype.com/en/sonatype-nexus-repository-3-92-0-release-notes.html support.sonatype.com: https://support.sonatype.com/hc/en-us/articles/51591695462675

Credits

Icare (@Icare1337)