CVE-2026-45154

Nextcloud is an open source content collaboration platform. From version 2.6.0 to before version 4.3.0, when a previous collective pages was deleted and the collective was shared view-only, guests with access to the collective were able to access the deleted pages directly from the trashbin. This issue has been patched in version 4.3.0.

CVSS v3 2.6 LOW

2.6^/10

CVSS v3 : LOW

Vector :

Exploitability : 1.2 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/nextcloud/collectives/pull/2432
https://github.com/nextcloud/security-advisories/security/advisories/GHSA-8mpv-ggq8-hf3w
https://hackerone.com/reports/3521434

Configurations

No configuration.

History

22 Jul 2026, 07:10

Type	Values Removed	Values Added
Summary		(es) Nextcloud es una plataforma de colaboración de contenido de código abierto. Desde la versión 2.6.0 hasta antes de la versión 4.3.0, cuando se eliminaba una página colectiva anterior y el colectivo se compartía en modo de solo lectura, los invitados con acceso al colectivo podían acceder a las páginas eliminadas directamente desde la papelera de reciclaje. Este problema ha sido parcheado en la versión 4.3.0.

01 Jun 2026, 17:17

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-06-01 17:17

Updated : 2026-07-22 07:10

NVD link : CVE-2026-45154

Mitre link : CVE-2026-45154

CVE.ORG link : CVE-2026-45154

JSON object : View

Products Affected

No product.

CWE

CWE-284

Improper Access Control

{"id": "CVE-2026-45154", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-45154", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-01T17:40:40.788059Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 2.6, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 1.2}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "nextcloud", "product": "security-advisories", "versions": [{"status": "affected", "version": ">= 2.6.0, < 4.3.0"}]}]}], "published": "2026-06-01T17:17:09.013", "references": [{"url": "https://github.com/nextcloud/collectives/pull/2432", "source": "security-advisories@github.com"}, {"url": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-8mpv-ggq8-hf3w", "source": "security-advisories@github.com"}, {"url": "https://hackerone.com/reports/3521434", "source": "security-advisories@github.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-284"}]}], "descriptions": [{"lang": "en", "value": "Nextcloud is an open source content collaboration platform. From version 2.6.0 to before version 4.3.0, when a previous collective pages was deleted and the collective was shared view-only, guests with access to the collective were able to access the deleted pages directly from the trashbin. This issue has been patched in version 4.3.0."}, {"lang": "es", "value": "Nextcloud es una plataforma de colaboraci\u00f3n de contenido de c\u00f3digo abierto. Desde la versi\u00f3n 2.6.0 hasta antes de la versi\u00f3n 4.3.0, cuando se eliminaba una p\u00e1gina colectiva anterior y el colectivo se compart\u00eda en modo de solo lectura, los invitados con acceso al colectivo pod\u00edan acceder a las p\u00e1ginas eliminadas directamente desde la papelera de reciclaje. Este problema ha sido parcheado en la versi\u00f3n 4.3.0."}], "lastModified": "2026-07-22T07:10:00.107", "sourceIdentifier": "security-advisories@github.com"}