https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T15:24:46.032787+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-197135 EUVD-2026-197135 2026-10-07T15:24:46.086744+00:00 EUVD-2026-197135 https://cve.radiocsirt.org/vuln/fkie_cve-2024-5764 fkie_cve-2024-5764 2026-10-07T15:24:46.086787+00:00

Use of Hard-coded Credentials vulnerability in Sonatype Nexus Repository has been discovered in the code responsible for encrypting any secrets stored in the Nexus Repository configuration database (SMTP or HTTP proxy credentials, user tokens, tokens, among others). The affected versions relied on a static hard-coded encryption passphrase. While it was possible for an administrator to define an alternate encryption passphrase, it could only be done at first boot and not updated.

This issue affects Nexus Repository: from 3.0.0 through 3.72.0.

 https://cve.radiocsirt.org/vuln/ghsa-5362-r6fh-h45f GHSA-5362-r6fh-h45f 2026-10-07T15:24:46.086825+00:00

Use of Hard-coded Credentials vulnerability in Sonatype Nexus Repository has been discovered in the code responsible for encrypting any secrets stored in the Nexus Repository configuration database (SMTP or HTTP proxy credentials, user tokens, tokens, among others). The affected versions relied on a static hard-coded encryption passphrase. While it was possible for an administrator to define an alternate encryption passphrase, it could only be done at first boot and not updated.

This issue affects Nexus Repository: from 3.0.0 through 3.72.0.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2864 WID-SEC-W-2025-2864 — Sonatype Nexus Repository Manager: Mehrere Schwachstellen 2026-10-07T15:24:46.086845+00:00

Ein Angreifer kann mehrere Schwachstellen in Sonatype Nexus Repository Manager ausnutzen, um Informationen offenzulegen und Cross-Site-Scripting-Angriffe durchzuführen.