An authenticated administrator who configures or tests LDAP connectivity in Sonatype Nexus Repository Manager versions 3.0.0 through 3.91.1 may be able to initiate uni…

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. May 11, 2026 · NIST NVD

   Detected

   An authenticated administrator who configures or tests LDAP connectivity in Sonatype Nexus Repository Manager versions 3.0.0 through 3.91.1 may be able to initiate unintended server-side connections when interacting with a malicious LDAP server.

2. Sep 22, 2026 · NIST NVD

   Updated

   An authenticated administrator who configures or tests LDAP connectivity in Sonatype Nexus Repository Manager versions 3.0.0 through 3.91.1 may be able to initiate unintended server-side connections when interacting with a malicious LDAP server.

Affected

• cpe sonatype/nexus repository managerversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-3048

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-3048

  An authenticated administrator who configures or tests LDAP connectivity in Sonatype Nexus Repository Manager versions 3.0.0 through 3.91.1 may be able to initiate unintended server-side connections when interacting with a malicious LDAP server.

  nvd.nist.gov

References

• Release Notes · help.sonatype.com
• Vendor Advisory · support.sonatype.com