DeutschShown in its original language — a full translation is planned for a future version.
Nextcloud: Mehrere Schwachstellen
view advisory published 2026-10-08
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen im Nextcloud Server und verschiedenen Apps ausnutzen, um Informationen offenzulegen, um Sicherheitsmechanismen zu umgehen und um einen Denial of Service herbeizuführen.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-77166US | — | — | ||
The emoji field in the page emoji update endpoint does not properly validate user input. By injecting long text and line breaks, the sidebar layout becomes broken and can hide othe… | ||||
| CVE-2026-77165US | — | — | ||
File owners were unable to unlock TYPE_TOKEN locks placed by other users, leaving files permanently locked with no recovery path outside of the database. | ||||
| CVE-2026-82985US | — | — | ||
The Photos app's filter-based "smart albums" build their file listing using the search configuration (photosSourceFolders) of the user viewing the album, rather than the album owne… | ||||
| CVE-2026-77169US | — | — | ||
A vulnerability in the team folders (formerly group folders) app when used in combination with the workspace app allowed API/REST-only delegated administrators to bypass folder-lev… | ||||
| CVE-2026-68493US | — | — | ||
After guessing a 62^15 complex unique identifier, a malicious logged in user was able to retrieve a list of memberships for a circle they are not a member of. | ||||
02
references
External citations — patches, advisories, analysis.
- GitHub Security Advisory GHSA-22w9-gpgv-pcgc vom 2026-10-08external
- GitHub Security Advisory GHSA-4vpp-fp9q-9g23 vom 2026-10-08external
- GitHub Security Advisory GHSA-5gv7-hw69-w6px vom 2026-10-08external
- GitHub Security Advisory GHSA-9mjh-89xm-hcqw vom 2026-10-08external
- GitHub Security Advisory GHSA-f99w-3pm7-v4cv vom 2026-10-08external
- WID-SEC-W-2026-3840 - CSAF Versionself
- WID-SEC-2026-3840 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan