Servers and applications
CVE-2026-45285
Nextcloud is an open source content collaboration platform. From versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, when a user shares a folder or file with a Nextcloud Team that includes an external member (a person added via email address who does not have a Nextcloud account), the system automatically creates a public link for that external member. This public link is not…
- Severity
- Medium 6.4
- Published
- 1 Jun 2026
- Last changed
- 22 Jul 2026
- Added to UpHeron
- 21 Oct 2026
- Fixed in
- 32.0.9, 33.0.3
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
NextcloudServers and applications · cpe:a:nextcloud:nextcloud_server |
|