Feed/CVE-2026-3199
CVE-2026-3199HIGHCVSS 8.8

CVE-2026-3199

Published Apr 8, 2026·Updated Sep 18, 2026

NVD Description

A vulnerability in the task management component of Sonatype Nexus Repository versions 3.22.1 through 3.90.2 allows an authenticated attacker with task creation permissions to execute arbitrary code, bypassing the nexus.scripts.allowCreation security control.

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Register your stack and get notified within minutes when a matching CVE drops.

Start monitoring free