VULNERABILITY INTELLIGENCE

CVE-2026-45278

CVSS score3.3 LOW
EPSS probability0.23%
CISA KEVNot currently listed
Published2026-06-01
Last modified2026-07-20
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Description

Nextcloud is an open source content collaboration platform. From version 6.1.0 to before version 8.2.2, an attacker can craft links that would redirect users to another website, when the victim uses the attackers link to log in via user OIDC. This issue has been patched in version 8.2.2.

Weakness classification

  • security-advisories@github.com: CWE-601

Primary references