CVE-2026-113373

Sonatype Nexus Repository 3 Pro is vulnerable to an authentication bypass because it fails to verify the local account status during sign-in via SAML or OAuth2/OpenID Connect identity providers. An administrator may disable or lock a local account, but the user can still obtain a new session with...