CVE-2026-45284Medium· 4.6▾ SunlitNextcloud is an open source content collaboration platform. From version 1.3.6 to before version 8.4.0, an improper check allowed users that where provided by LDAP to still authenticate towards user OIDC after they where deleted. This is…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 25.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 1.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.2%
0.2% → 0.4%
Nextcloud is an open source content collaboration platform. From version 1.3.6 to before version 8.4.0, an improper check allowed users that where provided by LDAP to still authenticate towards user OIDC after they where deleted. This issue has been patched in version 8.4.0.
user_oidc >= 1.3.6, < 8.4.0Upgrade past the affected range:
user_oidc 8.4.0Connected by shared product, vendor, weakness, or advisory.
CVE-2026-82986Medium· 4.6The user in a group can bypass the group restriction set by an administrator on link sharing, creating share links for a table even though they shouldn't have that permission.
CVE-2026-77171Low· 3.5A public shared collective always allowed recipients of the link to create pages.
CVE-2026-77173Medium· 4.3A user could create a docx or odt file with a # in the filename with confidential information such as a credit card number and have it not be marked as confidential.
CVE-2026-67400Low· 3.5A missing token type check allowed to retrieve more additional information about the WOPI configuration with a user or guest token.
CVE-2026-82984Medium· 4.3When a team was configured as "visible to everyone", the web UI correctly blocked non-members from viewing the team ("You are not a member of ..."), but the resources API endpoint could still be called directly, allowing any authenticate…
CVE-2025-66557Medium· 5.4Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud