CVE-2026-68493
CVE-2026-68493
This page contains facts from public vulnerability sources. Check the original advisory before updating.
After guessing a 62^15 complex unique identifier, a malicious logged in user was able to retrieve a list of memberships for a circle they are not a member of.
CVSS 3.1 · Low · EPSS 0.2%
- Published
- Updated
Stack: applications
Affected products and versions
nextcloud
- Versions
- ≥ 32.0.0, ≤ 34.0.0: Affected (semver)
No fix published