CVE-2026-77124 | Sonatype Nexus Repository up to 3.95.x Script Execution /service/rest/v1/script Name permission

September 2, 2026 Yanac

A vulnerability was found in Sonatype Nexus Repository up to 3.95.x. It has been rated as critical. Affected is an unknown function of the file /service/rest/v1/script of the component Script Execution. Performing a manipulation of the argument Name results in permission issues.

This vulnerability is known as CVE-2026-77124. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More