https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T18:03:26.723841+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-45275 CVE-2026-45275 — Nextcloud: Authorization bypass in approval feature allows unauthorized file sharing with approvers 2026-10-06T18:03:26.745075+00:00

Affected: nextcloud security-advisories

Nextcloud is an open source content collaboration platform. Prior to version 2.7.2, a privilege escalation vulnerability exists in the Approval app that allows a user without sharing permissions to force the system to share a file with approvers. This results in an authorization bypass and privilege escalation, allowing unauthorized distribution of restricted files. This issue has been patched in version 2.7.2.