CVE-2026-31215

The nexent v1.7.5.2 backend service contains an unauthorized arbitrary file deletion vulnerability in its ElasticSearch service interface. The DELETE /indexname/documents endpoint lacks proper authentication and authorization controls and does not validate the user-supplied pathorurl parameter...

CVE-2026-31215

The nexent v1.7.5.2 backend service contains an unauthorized arbitrary file deletion vulnerability in its ElasticSearch service interface. The DELETE /indexname/documents endpoint lacks proper authentication and authorization controls and does not validate the user-supplied pathorurl parameter...

Elasticsearch DoS

The vulnerability of the Elasticsearch search engine’s application programming interface is related to an exception handling error. Exploiting this vulnerability could allow a malicious actor to cause service failures using a specially crafted PDF file...

Elasticsearch API Disclosure

The vulnerability of the Elasticsearch search engine’s application programming interface is related to insufficient protection of registration data. Exploiting this vulnerability could allow a perpetrator to disclose protected information...