CVE-2026-31215

The nexent v1.7.5.2 backend service contains an unauthorized arbitrary file deletion vulnerability in its ElasticSearch service interface. The DELETE /indexname/documents endpoint lacks proper authentication and authorization controls and does not validate the user-supplied pathorurl parameter...

The vulnerability of the Elasticsearch search engine’s application programming interface allows a hacker to trigger a service failure.

The vulnerability of the Elasticsearch search engine’s application programming interface is related to an exception handling error. Exploiting this vulnerability could allow a malicious actor to cause service failures using a specially crafted PDF file...

The vulnerability of the application programming interface of the Elasticsearch search engine allows a hacker to disclose protected information.

The vulnerability of the Elasticsearch search engine’s application programming interface is related to insufficient protection of registration data. Exploiting this vulnerability could allow a perpetrator to disclose protected information...