CVE-2026-113370

A flaw was found in Sonatype Nexus Repository. An authenticated user with task creation privileges can modify records in the underlying application database by exploiting a Structured Query Language SQL injection vulnerability. When the optional search reindexing task is enabled, an attacker can...