VULNERABILITY INTELLIGENCE

CVE-2026-0601

CVSS score5.1 MEDIUM

EPSS probability0.43%

CISA KEVNot currently listed

Published2026-01-14

Last modified2026-06-17

Description

A reflected cross-site scripting vulnerability exists in Nexus Repository 3 that allows unauthenticated attackers to execute arbitrary JavaScript in a victim's browser through a specially crafted request requiring user interaction.