| Reporter | Title | Published | Views | Family All 14 |
|---|---|---|---|---|
 | June Linux Patch Wednesday | 26 Jun 202617:00 | – | avleonov |
 | The vulnerability of the authentication module in cloud software for creating and using Nextcloud data storage allows a hacker to escalate their privileges. | 25 Jun 202600:00 | – | bdu_fstec |
 | Exploit for CVE-2026-45156 | 23 Jun 202619:02 | – | githubexploit |
 | CVE-2026-45156 | 12 May 202614:15 | – | circl |
 | Nextcloud user_oidc 授权问题漏洞 | 1 Jun 202600:00 | – | cnnvd |
 | CVE-2026-45156 Nextcloud: Authentication Bypass in ID4me handling via Missing JWT Signature Verification in User OIDC | 1 Jun 202616:38 | – | cvelist |
 | EUVD-2026-33675 | 1 Jun 202616:38 | – | euvd |
 | Authentication Bypass in ID4me handling via Missing JWT Signature Verification in User OIDC | 12 May 202609:12 | – | nextcloud |
 | Nextcloud: Authentication Bypass in ID4me handling via Missing JWT Signature Verification in User OIDC | 7 Jan 202608:44 | – | hackerone |
 | CVE-2026-45156-POC | 14 Sep 202611:47 | – | kitploit |
10
[
{
"vendor": "nextcloud",
"product": "security-advisories",
"versions": [
{
"version": ">= 0.3.0, < 3.1.0",
"status": "affected"
},
{
"version": ">= 5.0.0, < 5.1.0",
"status": "affected"
},
{
"version": ">= 6.0.0, < 6.4.0",
"status": "affected"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| requesttoken | path | /apps/user_oidc/ | Improper verification of cryptographic signature in Nextcloud user_oidc ID4me flow leading to authentication bypass | CWE-287 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
22 Jul 2026 07:10Current
5.7Medium risk
Vulners AI Score5.7
CVSS 3.18.1
EPSS0.00412
SSVC