Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-45267 EUVD-2026-33679

Nextcloud: Missing permission check for from submissions

Published Jun 1, 2026 · Updated Jun 1, 2026 · Assigned by GitHub_M

Description

Nextcloud is an open source content collaboration platform. Prior to version 5.2.6, a missing permissions check allowed users to request reading form submissions of other users. This issue has been patched in version 5.2.6.

Affected products

VendorProductAffectedFixed
nextcloud security-advisories < 5.2.6 —

Advisories 1

References