CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

← Back to feed

Multiple vulnerabilities in Nextcloud products (August 6, 2026)

unknownCVE-2026-61545CVE-2026-61527
Multiple vulnerabilities have been discovered in Nextcloud products. They allow an attacker to cause a breach of data confidentiality and a security policy bypass.

CSIRTS triage

vendor: NextcloudInformation disclosureAuthentication bypass
What
Multiple vulnerabilities allow data confidentiality breaches and security policy bypass.
Who is affected
Deployments of affected Nextcloud products.
Urgency
High urgency; data confidentiality breaches are critical issues requiring immediate attention.
Action
Check Nextcloud security advisories for CVE-2026-61545 and CVE-2026-61527 and apply patches.

AI-assisted analysis generated from the source advisory — verify against the original.

Details

Source
CERT-FR Avis de sécurité (FR · national-cert · site)
Severity
unknown
Published
2026-08-06
Exploitation
Not in CISA KEV at last sync
Language
Machine-translated to English — verify against the original

Original advisory: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0973/

Referenced CVEs

CVECSIRTS overviewExternal
CVE-2026-61545coverage & exploitation statusNVD · CVE.org
CVE-2026-61527coverage & exploitation statusNVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

More from CERT-FR Avis de sécurité