CVE-2026-45159

Nextcloud vulnerability CVE-2026-45159 affects end-to-end encrypted file drop links. A malicious user with access to a drop link could drop files into other end-to-end encrypted folders owned by the share owner, but could not read or modify unrelated files. Mitigation is upgrading to patched rele...

CVE-2026-45159 Nextcloud: Files drop share links for end-to-end encrypted folders allowed to drop files into other folders of the share owner

Nextcloud is an open source content collaboration platform. From versions 1.15.0 to before 1.15.4, 1.16.0 to before 1.16.3, 1.17.0 to before 1.17.1, and 1.18.0 to before 1.18.1, a malicious user with access to an end-to-end encrypted files drop link was able to also drop files into other end-to-e...

Valid share tokens allow to access tempory upload files of share owner

None...

ceph: user/tenant can obtain access (read/write) to any share

A flaw was found in OpenStack Manila, where owning a Ceph File system "share" enables the owner to read/write any Manila share or entire file system. The vulnerability is due to a bug in the "volumes" plugin in Ceph Manager. This flaw allows an attacker to compromise the confidentiality and...

ownCloud 信息泄露漏洞

Owncloud ownCloud is a personal cloud storage solution from US-based ownCloud Owncloud. An information disclosure vulnerability exists in ownCloud Server that stems from a generated error message containing sensitive information. An attacker could trigger the error by appending certain characters...