CVE-2026-45722High· 7.1▾ TwilightNextcloud is an open source content collaboration platform. From versions 0.9.0 to before 0.9.7, and 1.0.0 to before 1.0.2, a missing sanitization in the Tables app allowed a user with access to the tables app to perform a limited SQL in…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 39.1 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 30.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.3%
0.3% → 0.5%
Nextcloud is an open source content collaboration platform. From versions 0.9.0 to before 0.9.7, and 1.0.0 to before 1.0.2, a missing sanitization in the Tables app allowed a user with access to the tables app to perform a limited SQL injection in the ORDER BY statement of a query. Compared to normal SQL injections, the ORDER BY is limited to extracting a single bit of information per request or to make the database wait for a given time. This issue has been patched in versions 0.9.7 and 1.0.2.
tables >= 0.9.0, < 0.9.7tables >= 1.0.0, < 1.0.2Upgrade past the affected range:
tables 1.0.2Connected by shared product, vendor, weakness, or advisory.
CVE-2026-45545High· 8.2Nextcloud is an open source content collaboration platform
CVE-2025-66553Medium· 4.3Nextcloud Tables allows you to create your own tables with individual columns
CVE-2025-66513Medium· 4.3Nextcloud Tables allows you to create your own tables with individual columns
CVE-2026-82986Medium· 4.6The user in a group can bypass the group restriction set by an administrator on link sharing, creating share links for a table even though they shouldn't have that permission.
CVE-2026-82983Low· 3.3The Tables app's share-listing endpoint (GET /apps/tables/share/table/{tableId}) did not verify that the requesting user has manage-level permission on the table before returning the full list of share recipients (users, groups, and team…
CVE-2025-66551Medium· 6.3Nextcloud Tables allows you to create your own tables with individual columns