FrançaisShown in its original language — a full translation is planned for a future version.
Multiples vulnérabilités dans les produits Nextcloud
view advisory published 2026-10-27
A published security advisory; the vulnerabilities below are the ones it describes.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-77173US | — | — | ||
A user could create a docx or odt file with a # in the filename with confidential information such as a credit card number and have it not be marked as confidential. | ||||
| CVE-2026-77172US | — | — | ||
App passwords were allowed to bypass password confirmation on sensitive endpoints. | ||||
| CVE-2026-77171US | — | — | ||
A public shared collective always allowed recipients of the link to create pages. | ||||
| CVE-2026-77167US | — | — | ||
Abusing the federated share endpoint, an attacker can write arbitrary rows into the oc_share_external database table. These rows persist indefinitely — there is no automatic cleanu… | ||||
| CVE-2026-67400US | — | — | ||
A missing token type check allowed to retrieve more additional information about the WOPI configuration with a user or guest token. | ||||
| CVE-2026-114601US | — | — | ||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan