DeutschShown in its original language — a full translation is planned for a future version.
Nextcloud: Mehrere Schwachstellen
view advisory published 2026-05-11
Ein Angreifer kann mehrere Schwachstellen im Nextcloud Server und verschiedenen Apps ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, und um Dateien zu manipulieren.
01
describes (19)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-45286US | — | — | ||
Nextcloud is an open source content collaboration platform. From versions 5.5.13 to before 5.5.17, and 6.2.0 to before 6.2.3, an authenticated user can enumerate users on the same… | ||||
| CVE-2026-45285US | —OT elevated | — | ||
Nextcloud is an open source content collaboration platform. From versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, when a user shares a folder or file with a Nextcloud… | ||||
| CVE-2026-45284US | high8.8 | — | ||
Nextcloud is an open source content collaboration platform. From version 1.3.6 to before version 8.4.0, an improper check allowed users that where provided by LDAP to still authent… | ||||
| CVE-2026-45283US | medium4.3 | — | ||
Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.2, and 33.0.0 to before 33.0.1, the files_lock app did not prope… | ||||
| CVE-2026-45282US | — | — | ||
Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, an authenticated attacker can ac… | ||||
| CVE-2026-45281US | — | — | ||
Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, with the knowledge of other user… | ||||
| CVE-2026-45279US | medium6.5 | — | ||
Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 31.0.0 to before 31.0.14, and 32.0.0 to before 32.0.4, if {lang} is used in the templa… | ||||
| CVE-2026-45278US | medium6.1 | — | ||
Nextcloud is an open source content collaboration platform. From version 6.1.0 to before version 8.2.2, an attacker can craft links that would redirect users to another website, wh… | ||||
| CVE-2026-45277US | — | — | ||
Nextcloud is an open source content collaboration platform. Prior to version 2.7.2, authenticated users can check if arbitrary files are associated with specific approval workflows… | ||||
| CVE-2026-45275US | — | — | ||
Nextcloud is an open source content collaboration platform. Prior to version 2.7.2, a privilege escalation vulnerability exists in the Approval app that allows a user without shari… | ||||
| CVE-2026-45267US | —OT elevated | — | ||
Nextcloud is an open source content collaboration platform. Prior to version 5.2.6, a missing permissions check allowed users to request reading form submissions of other users. Th… | ||||
| CVE-2026-45266US | — | — | ||
Nextcloud is an open source content collaboration platform. Prior to versions 21.1.10, 22.0.11, and 23.0.3, a low-privileged user can force other user's microphones to be muted in… | ||||
| CVE-2026-45264US | — | — | ||
Nextcloud is an open source content collaboration platform. From versions 17.0.0 to before 17.0.15, 18.0.0 to before 18.1.12, 19.0.0 to before 19.1.16, 20.0.0 to before 20.1.11, an… | ||||
| CVE-2026-45159US | — | — | ||
Nextcloud is an open source content collaboration platform. From versions 1.15.0 to before 1.15.4, 1.16.0 to before 1.16.3, 1.17.0 to before 1.17.1, and 1.18.0 to before 1.18.1, a… | ||||
| CVE-2026-45157US | — | — | ||
Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, when a malicious user has access… | ||||
| CVE-2026-45156US | — | Exploit | ||
Nextcloud is an open source content collaboration platform. From versions 0.3.0 to before 3.1.0, 5.0.0 to before 5.1.0, and 6.0.0 to before 6.4.0, a missing signature verification… | ||||
| CVE-2026-45155US | — | — | ||
Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.7 and 33.0.0 to before 33.0.1, a missing access check on API lev… | ||||
| CVE-2026-45154US | — | — | ||
Nextcloud is an open source content collaboration platform. From version 2.6.0 to before version 4.3.0, when a previous collective pages was deleted and the collective was shared v… | ||||
| CVE-2026-45153US | — | — | ||
Nextcloud is an open source content collaboration platform. From version 33.0.0 to before version 33.1.0, after unlocking a locked Android phone the back-button could be used to by… | ||||
02
references
External citations — patches, advisories, analysis.
- GitHub Security Advisory GHSA-2w7v-5299-3hw5 vom 2026-05-11external
- GitHub Security Advisory GHSA-35fx-69q6-xpjr vom 2026-05-11external
- GitHub Security Advisory GHSA-45pj-p7x7-4mhc vom 2026-05-11external
- GitHub Security Advisory GHSA-4chh-6mhf-p4jj vom 2026-05-11external
- GitHub Security Advisory GHSA-79xf-ffj8-96fm vom 2026-05-11external
- GitHub Security Advisory GHSA-8mpv-ggq8-hf3w vom 2026-05-11external
- GitHub Security Advisory GHSA-8wjr-5cg8-4w73 vom 2026-05-11external
- GitHub Security Advisory GHSA-h7gm-vgxr-9hcw vom 2026-05-11external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan