UpHeron
All vulnerabilities

Servers and applications

CVE-2026-45810

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 31.0.0 to before 31.0.12, and 32.0.0 to before 32.0.3, a missing check of a relation allowed authenticated users with access to any file comment, to read the content of all comments. It is recommended that the Nextcloud Server is upgraded to 31.0.12 or 32.0.3. It is recommended that the Nextcloud…

Severity
Medium 6.8
Published
1 Jun 2026
Last changed
22 Jul 2026
Added to UpHeron
21 Oct 2026
Fixed in
27.1.11.22, 28.0.14.13, 29.0.16.10, 30.0.17.5, 31.0.12, 32.0.3
Sources
NVD

Affected software

SoftwareAffected versions
NextcloudServers and applications · cpe:a:nextcloud:nextcloud_server
  • From 32.0.0 before 32.0.3
  • From 31.0.0 before 31.0.12
  • From 30.0.0 before 30.0.17.5
  • From 29.0.0 before 29.0.16.10
All 12 release lines
  • From 21.0.0 before 21.0.9.20
  • From 22.0.0 before 22.2.10.35
  • From 23.0.0 before 23.0.12.31
  • From 24.0.0 before 24.0.12.30
  • From 25.0.0 before 25.0.13.25
  • From 26.0.0 before 26.0.13.22
  • From 27.0.0 before 27.1.11.22
  • From 28.0.0 before 28.0.14.13
  • From 29.0.0 before 29.0.16.10
  • From 30.0.0 before 30.0.17.5
  • From 31.0.0 before 31.0.12
  • From 32.0.0 before 32.0.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2026-45810
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-45810