tag
Nextcloud
CVE-2026-45156
web
HIGH 8.1
Nextcloud user_oidc ID4me JWT Signature Bypass (CVE-2026-45156)
Nextcloud's useroidc app processes JWT idtoken values received from ID4me identity providers by splitting the token on . and calling base64decode() on the header and payload segments — but never validates the cryptographic signature (Id4meController.php lines…
Patched
2026-07-05
None assigned as of 2026-07-03
cloud
HIGH
Nextcloud Federated Share OCM Bearer Token Scope Escalation to Sender WebDAV Access
When a Nextcloud user creates a normal federated file share, the sender instance generates a permanent authentication token that is also stored as the federated share's secret; that token is created without an explicit narrow scope, so it defaults to full…
Unverified
2026-07-03