High · 7.5 CVE-2026-107059 EUVD-2026-113255GHSA-f85r-vx8m-r4hr

An issue in Nextcloud versionCode 30390190 allows attackers to force victim users to logout of their accounts and switch to an attacker con…

Published Oct 29, 2026 · Updated Nov 3, 2026 · Assigned by mitre

Description

An issue in Nextcloud versionCode 30390190 allows attackers to force victim users to logout of their accounts and switch to an attacker controlled progile, bypassing authentication.

References

https://f-droid.org/packages/com.nextcloud.client/
https://github.com/nextcloud/android
https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107059.md