Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Sonatype Nexus Repository 3 3.96.0 Clear all filters
TI-2026-53866 CVE-2026-77122 · GHSA-86mj-jv63-p44v

Incorrect authorization in Sonatype Nexus Repository 3

Priority LOW 24

An authorization flaw in the REST API repository details endpoint (GET /service/rest/v1/repositories/{repositoryName}) in Sonatype Nexus Repository 3 allowed an account holding read or browse permission on a group reposi…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00281 Published 2026-09-02 Fixed in 3.96.0 CWE-863
TI-2026-53868 CVE-2026-77124 · GHSA-jrwv-32cm-hj63

Nexus Repository 3 - Script Execution Disable Setting Not Enforced

Priority LOW 36

In affected versions of Nexus Repository 3, the script execution endpoint (POST /service/rest/v1/script/{name}/run) did not verify whether script execution had been administratively disabled.

CVSS 4.0HIGH 7.5 Network High privileges No interaction EPSS 0.00724 Published 2026-09-02 Fixed in 3.96.0 CWE-184
TI-2026-53869 CVE-2026-77125 · GHSA-mgww-mhp8-f89c

Nexus Repository 3 - Incorrect Authorization on Blobstore Group Endpoints

Priority LOW 31

A vulnerability was identified in Sonatype Nexus Repository 3 in which two blobstore group management REST API endpoints did not correctly enforce the intended authorization check.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00288 Published 2026-09-02 Fixed in 3.96.0 CWE-863