CVE-2026-68493

Nextcloud / Server PUBLISHED

Description (CNA)

After guessing a 62^15 complex unique identifier, a malicious logged in user was able to retrieve a list of memberships for a circle they are not a member of.

Affected (CNA)

Vendor / product	Versions
Nextcloud / Server	affected 32.0.0 through 34.0.0

CWE

CWE-639

References

https://hackerone.com/reports/3484601

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.