CVE-2026-45156 | BDVDB-2026-337091 Detail

Description#

Nextcloud is an open source content collaboration platform. From versions 0.3.0 to before 3.1.0, 5.0.0 to before 5.1.0, and 6.0.0 to before 6.4.0, a missing signature verification in User OIDC allowed a malicious ID4me authority to identify as any user. This issue has been patched in versions 3.1.0, 4.1.0, 5.1.0, 6.4.0 and 8.3.0.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-06-01Record published in the CVE List.
2. Version 22026-06-03Most recent update recorded in the CVE List.