Announcements
- PostgreSQL Index Corruption - "duplicate key violation" errors
- Sonatype Data Services (HDS) Regularly Scheduled Maintenance
- IQ Server vulnerability information contains the Root Cause
- codehaus.org Repositories Should Be Removed From Your Nexus Repository Instance
- Log4Shell log4j Vulnerability CVE-2021-44228 Status
- Spring Framework RCE Vulnerability CVE-2021-22963 and SONATYPE-2022-1764
Security Advisories
- CVE-2026-17603 Nexus Repository 3 - HikariCP connectionInitSql Injection RCE via DataStore Configuration API - 2026-08-07
- CVE-2026-17601 Nexus Repository 3 - Wildcard Privilege Update Self-Escalation to Administrator - 2026-08-07
- CVE-2026-17600 Nexus Repository 3 - Session Not Invalidated on Account Deletion or Deactivation - 2026-08-07
- CVE-2026-17599 Nexus Repository 3 - Unverified Onboarding State on change-admin-password Endpoint - 2026-08-07
- CVE-2026-17598 Nexus Repository 3 - Improper Input Validation in Scheduled Task Configuration - 2026-08-07
- CVE-2026-17597 Nexus Repository 3 - SSRF via Email Configuration Verification - 2026-08-07