Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Nexus Insertion of Sensitive Information Into Sent Data Vulnerability - CVE-2026-77123 - Vulnerability Database
Nexus Repository Manager

Nexus Insertion of Sensitive Information Into Sent Data Vulnerability - CVE-2026-77123

Medium
Reference: CVE-2026-77123
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2026-77123
Title: Nexus Insertion of Sensitive Information Into Sent Data Vulnerability
Overview:

Nexus Repository 3 contains a sensitive information disclosure vulnerability in the capability read API. An account holding the nexus:capabilities:read privilege can retrieve the plaintext shared secret configured on a webhook capability which is intended to be masked from all API responses. This issue affects Nexus Repository 3 versions 3.2.0 through 3.95.x and is fixed in version 3.96.0.