{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3asonatypenexus_repository_3_pro/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:sonatype:nexus_repository_3_pro:*:*:*:*:*:*:*:*"],"_cs_cves":[{"id":"CVE-2026-113373"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Nexus Repository 3 Pro"],"_cs_severities":["high"],"_cs_tags":["auth-bypass","authentication","webserver"],"_cs_type":"advisory","_cs_vendors":["Sonatype"],"content_html":"\u003cp\u003eSonatype Nexus Repository 3 Pro fails to validate the local account status of users when authenticating via SAML or OAuth2/OpenID Connect identity providers. An account that has been disabled or locked by an administrator remains able to initiate a session by authenticating against the external identity provider. Upon successful external authentication, the repository grants the user a session with all roles associated with the existing, albeit disabled, local account. This vulnerability allows an attacker possessing valid credentials for the identity provider to bypass account lockout controls.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation results in an unauthorized, authenticated session within Nexus Repository 3 Pro with the permissions assigned to the target account. This bypasses organizational policies intended to revoke access for terminated or suspended users.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade to the latest version of Nexus Repository 3 Pro as specified in the official release notes to remediate CVE-2026-113373.\u003c/li\u003e\n\u003cli\u003eAudit administrative logs for unusual authentication patterns for accounts previously marked as disabled or locked.\u003c/li\u003e\n\u003cli\u003eReview SAML and OAuth2/OpenID Connect configurations for administrative users to ensure local status checks are enforced if supported by the integration.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-05T00:21:29Z","date_published":"2026-11-05T00:21:29Z","id":"https://feed.craftedsignal.io/briefs/2026-11-nexus-auth-bypass/","summary":"Sonatype Nexus Repository 3 Pro is vulnerable to an authentication bypass (CVE-2026-113373) that allows locked or disabled users to successfully authenticate via SAML or OAuth2/OpenID Connect and gain an active session.","title":"Sonatype Nexus Repository 3 Pro: Authentication bypass (CVE-2026-113373)","url":"https://feed.craftedsignal.io/briefs/2026-11-nexus-auth-bypass/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:sonatype:nexus_repository_3_pro:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}