DeutschShown in its original language — a full translation is planned for a future version.
Nextcloud: Mehrere Schwachstellen
view advisory published 2026-05-12
Ein Angreifer kann mehrere Schwachstellen in Nextcloud ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, und um einen SQL-Injection Angriff durchzuführen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-45691US | — | — | ||
Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, a pre-2FA session cookie (create… | ||||
| CVE-2026-45545US | — | — | ||
Nextcloud is an open source content collaboration platform. From versions 0.7.0 to before 0.7.7, 0.8.0 to before 0.8.10, 0.9.0 to before 0.9.8, and 1.0.0 to before 1.0.4, an authen… | ||||
| CVE-2026-45544US | — | — | ||
Nextcloud is an open source content collaboration platform. From version 0.8.0 to before version 1.0.4, the view filter criteria is exposed to users with read-only permissions in N… | ||||
| CVE-2026-45543US | — | — | ||
Nextcloud is an open source content collaboration platform. From version 4.3.0 to before version 5.2.7, a removed collaborator retains unauthorized read access to uploaded responde… | ||||
02
references
External citations — patches, advisories, analysis.
- GitHub Security Advisory GHSA-mp6x-g55j-w9jw vom 2026-05-12external
- GitHub Security Advisory GHSA-q4fw-6jf8-5vhh vom 2026-05-12external
- GitHub Security Advisory GHSA-vvxm-6jjp-m9mp vom 2026-05-12external
- GitHub Security Advisory GHSA-x43f-gmgh-vvjj vom 2026-05-12external
- WID-SEC-W-2026-1517 - CSAF Versionself
- WID-SEC-2026-1517 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan