CVE-2026-107059: vulnerability facts

CVE-2026-107059

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An issue in Nextcloud versionCode 30390190 allows attackers to force victim users to logout of their accounts and switch to an attacker controlled progile, bypassing authentication.

EPSS 0.2%

Published: 2026-10-29T00:00:00.000Z
Updated: 2026-10-29T16:51:59.824Z

Affected products and versions

n/a
Versions
- n/a: Affected
No fix published

Original sources

https://f-droid.org/packages/com.nextcloud.client/
https://github.com/nextcloud/android
https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107059.md
https://nvd.nist.gov/vuln/detail/CVE-2026-107059

Check your server →

CVE-2026-107059

Affected products and versions

n/a

Original sources