CVE-2026-45154

2.6 Faible

Publiée le 01/06/2026 à 19:17 · Modifiée le 22/07/2026 à 09:10 · Analyse NVD reportée · Source : security-advisories@github.com

Description

Nextcloud is an open source content collaboration platform. From version 2.6.0 to before version 4.3.0, when a previous collective pages was deleted and the collective was shared view-only, guests with access to the collective were able to access the deleted pages directly from the trashbin. This issue has been patched in version 4.3.0.

Traduire en français

Produits concernés

nextcloud security-advisories

Scores CVSS

Version	Score	Source	Vecteur
3.1	2.6 Faible	security-advisories@github.com	`CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N`

Faiblesses (CWE)

CWE-284

Références

https://github.com/nextcloud/collectives/pull/2432
https://github.com/nextcloud/security-advisories/security/advisories/GHSA-8mpv-ggq8-hf3w
https://hackerone.com/reports/3521434

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories