Read the docs

ModelEngine-Group

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

ModelEngine-Group records in CISA KEV

No ModelEngine-Group vulnerabilities are listed in CISA KEV.

Records

1 record

Priority MEDIUM 64

Nexent through 2.7.0 contains a missing authorization vulnerability in check_file_access that allows authenticated users to read other tenants' knowledge-base files by skipping tenant comparison for knowledge_base/ reads…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00249 Published 2026-10-14 No fix listed CWE-639
Open these records in search →