CVE-2026-45544Medium· 4.3▾ SunlitNextcloud is an open source content collaboration platform. From version 0.8.0 to before version 1.0.4, the view filter criteria is exposed to users with read-only permissions in Nextcloud Tables. This issue has been patched in versions …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 23.7 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 31.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.2%
0.2% → 0.4%
Nextcloud is an open source content collaboration platform. From version 0.8.0 to before version 1.0.4, the view filter criteria is exposed to users with read-only permissions in Nextcloud Tables. This issue has been patched in versions 1.0.4 and 2.0.0.
tables >= 0.8.0, < 1.0.4Upgrade past the affected range:
tables 1.0.4Connected by shared product, vendor, weakness, or advisory.
CVE-2025-66553Medium· 4.3Nextcloud Tables allows you to create your own tables with individual columns
CVE-2025-66513Medium· 4.3Nextcloud Tables allows you to create your own tables with individual columns
CVE-2026-82986Medium· 4.6The user in a group can bypass the group restriction set by an administrator on link sharing, creating share links for a table even though they shouldn't have that permission.
CVE-2026-82983Low· 3.3The Tables app's share-listing endpoint (GET /apps/tables/share/table/{tableId}) did not verify that the requesting user has manage-level permission on the table before returning the full list of share recipients (users, groups, and team…
CVE-2025-66551Medium· 6.3Nextcloud Tables allows you to create your own tables with individual columns
CVE-2026-45722High· 7.1Nextcloud is an open source content collaboration platform