Nexent vulnerabilities
We track 2 vulnerabilities in Nexent products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 12, 2026.
2vulnerabilities
2critical
0high
0exploited
9.1average CVSS score
Latest Nexent vulnerabilities
- 9.1 Critical severity
Nexent: Files or Directories Accessible to External Parties
The nexent v1.7.5.2 backend service contains an unauthorized arbitrary storage file deletion vulnerability in its file management API. The DELETE /storage/{object_name:path} endpoint lacks authentication, authorization, and input validation mechanisms. Unauthe
- 9.1 Critical severity
Nexent: Files or Directories Accessible to External Parties
The nexent v1.7.5.2 backend service contains an unauthorized arbitrary file deletion vulnerability in its ElasticSearch service interface. The DELETE /{index_name}/documents endpoint lacks proper authentication and authorization controls and does not validate