CVE-2026-84473

The ownCloud server version 10.16.3 is vulnerable to an Authentication Bypass caused by Missing Brute-Force Protection in the remote.php/webdav/ endpoint. This flaw allows an unauthenticated remote attacker to perform unlimited online password guessing against WebDAV accounts by sending repeated ...