CVE-2026-45286Medium· 4.3▾ SunlitNextcloud is an open source content collaboration platform. From versions 5.5.13 to before 5.5.17, and 6.2.0 to before 6.2.3, an authenticated user can enumerate users on the same Nextcloud instance by using the Calendar app's endpoint f…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 23.7 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 30.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.3%
0.3% → 0.5%
Nextcloud is an open source content collaboration platform. From versions 5.5.13 to before 5.5.17, and 6.2.0 to before 6.2.3, an authenticated user can enumerate users on the same Nextcloud instance by using the Calendar app's endpoint for suggesting attendees. The sharing restrictions, applied to other endpoints, were not effective here. This issue has been patched in versions 5.5.17 and 6.2.3.
calendar >= 5.5.13, < 5.5.17calendar >= 6.2.0, < 6.2.3Upgrade past the affected range:
calendar 6.2.3Connected by shared product, vendor, weakness, or advisory.
CVE-2026-82983Low· 3.3The Tables app's share-listing endpoint (GET /apps/tables/share/table/{tableId}) did not verify that the requesting user has manage-level permission on the table before returning the full list of share recipients (users, groups, and team…
CVE-2026-29052Medium· 6.1The Calendar module for HumHub enables users to create one-time or recurring events, manage attendee invitations, and efficiently track all scheduled activities
CVE-2022-31746Medium· 6.5Internal URLs are protected by a secret UUID key, which could have been leaked to web page through the Referrer header
CVE-2025-66558Low· 3.1Nextcloud Twofactor WebAuthn is the WebAuthn Two-Factor Provider for Nextcloud
CVE-2025-66556Low· 3.5Nextcloud talk is a video & audio conferencing app for Nextcloud
CVE-2025-66554Low· 3.5Contacts app for Nextcloud easily syncs contacts from various devices with your Nextcloud and allows editing