Nextcloud 2FA Bypass via Pending Session Token Replay (CVE-2026-45680) Advisory

github.com 2026-06-02查看中文 →

Security AdvisoryGHSA-jgcj-v42r-9922MediumNextcloud

Affected:

Nextcloud Server >= 33.0.0
Nextcloud Server >= 32.0.0
Nextcloud Enterprise Server >= 33.0.0
Nextcloud Enterprise Server >= 32.0.0
Nextcloud Enterprise Server >= 31.0.0

Fixed in:

Nextcloud Server 33.0.3
Nextcloud Server 32.0.9
Nextcloud Enterprise Server 33.0.3
Nextcloud Enterprise Server 32.0.9
Nextcloud Enterprise Server 31.0.14.5

Referenced CVEs: CVE-2026-45690 · 5.9

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Hunyuan3D Integration Arbitrary File Read and SSRF Vulnerability Patch 2026-06-03 libwebsockets CVE-2026-10650 Pre-Auth Remote DoS (OOM) via Unbounded Allocation 2026-06-03 OpenSSH Pre-Auth Unbounded Allocation DoS Vulnerability and PoC 2026-06-03 libwebsockets SSH Plugin Resource Exhaustion Vulnerability Fix 2026-06-03 authentik SFE Reflected XSS Vulnerability (CVE-2026-42649) 2026-06-03

Offline Archive

Offline screenshot & PDF are Pro-exclusive