CVE-2026-45545High· 8.2▾ TwilightNextcloud is an open source content collaboration platform. From versions 0.7.0 to before 0.7.7, 0.8.0 to before 0.8.10, 0.9.0 to before 0.9.8, and 1.0.0 to before 1.0.4, an authenticated attacker with access to the Tables app may be abl…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 45.1 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 31.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.3%
0.3% → 0.5%
Nextcloud is an open source content collaboration platform. From versions 0.7.0 to before 0.7.7, 0.8.0 to before 0.8.10, 0.9.0 to before 0.9.8, and 1.0.0 to before 1.0.4, an authenticated attacker with access to the Tables app may be able to execute arbitrary up to 20 bytes long SQL queries, through a stored injection. With carefully crafted input it is possible to break out of the length limitation. The attacker could use this to extract information from the database, or modify data. This issue has been patched in versions 0.7.7, 0.8.10, 0.9.8, 1.0.4, and 2.0.0.
tables >= 0.7.0, < 0.7.7tables >= 0.8.0, < 0.8.10tables >= 0.9.0, < 0.9.8tables >= 1.0.0, < 1.0.4Upgrade past the affected range:
tables 1.0.4Connected by shared product, vendor, weakness, or advisory.
CVE-2026-45722High· 7.1Nextcloud is an open source content collaboration platform
CVE-2025-66553Medium· 4.3Nextcloud Tables allows you to create your own tables with individual columns
CVE-2025-66513Medium· 4.3Nextcloud Tables allows you to create your own tables with individual columns
CVE-2026-82986Medium· 4.6The user in a group can bypass the group restriction set by an administrator on link sharing, creating share links for a table even though they shouldn't have that permission.
CVE-2026-82983Low· 3.3The Tables app's share-listing endpoint (GET /apps/tables/share/table/{tableId}) did not verify that the requesting user has manage-level permission on the table before returning the full list of share recipients (users, groups, and team…
CVE-2025-66551Medium· 6.3Nextcloud Tables allows you to create your own tables with individual columns