Vulners
Lucene search
CVE-2026-45156 Nextcloud: Authentication Bypass in ID4me handling via Missing JWT Signature Verification in User OIDC
| Reporter | Title | Published | Views | Family All 14 |
|---|---|---|---|---|
 | June Linux Patch Wednesday | 26 Jun 202617:00 | – | avleonov |
 | The vulnerability of the authentication module in cloud software for creating and using Nextcloud data storage allows a hacker to escalate their privileges. | 25 Jun 202600:00 | – | bdu_fstec |
 | Exploit for CVE-2026-45156 | 23 Jun 202619:02 | – | githubexploit |
 | CVE-2026-45156 | 12 May 202614:15 | – | circl |
 | Nextcloud user_oidc 授权问题漏洞 | 1 Jun 202600:00 | – | cnnvd |
 | CVE-2026-45156 | 1 Jun 202616:38 | – | cve |
 | EUVD-2026-33675 | 1 Jun 202616:38 | – | euvd |
 | Authentication Bypass in ID4me handling via Missing JWT Signature Verification in User OIDC | 12 May 202609:12 | – | nextcloud |
 | Nextcloud: Authentication Bypass in ID4me handling via Missing JWT Signature Verification in User OIDC | 7 Jan 202608:44 | – | hackerone |
 | CVE-2026-45156 | 1 Jun 202617:17 | – | nvd |
10
[
{
"vendor": "nextcloud",
"product": "security-advisories",
"versions": [
{
"version": ">= 0.3.0, < 3.1.0",
"status": "affected"
},
{
"version": ">= 5.0.0, < 5.1.0",
"status": "affected"
},
{
"version": ">= 6.0.0, < 6.4.0",
"status": "affected"
}
]
}
]Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
01 Jun 2026 16:38Current
CVSS 3.18.1
EPSS0.00329