Nextcloud — PoC Archivehttps://poc.intelseclab.com/tags/nextcloud/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000Nextcloud user_oidc ID4me JWT Signature Bypass (CVE-2026-45156)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-45156-nextcloud-id4me-jwt-bypass/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-45156-nextcloud-id4me-jwt-bypass/High severity (CVSS 8.1) — web · CVE-2026-45156. Status: PoC. Affects: Nextcloud user_oidc app — ID4me identity provider integration. Tags: nextcloud, user_oidc, id4me, jwt, alg-none, authentication-bypass, cwe-347.webHighnextclouduser_oidcid4mejwtalg-noneauthentication-bypasscwe-347Nextcloud Federated Share OCM Bearer Token Scope Escalation to Sender WebDAV Accesshttps://poc.intelseclab.com/pocs/cloud/2026-07-03_nextcloud-federated-share-bearer-token-leak/Fri, 03 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/cloud/2026-07-03_nextcloud-federated-share-bearer-token-leak/High severity — cloud · None assigned as of 2026-07-03. Status: PoC. Affects: Nextcloud Server — federated file sharing, OCM token exchange, WebDAV bearer authentication. Tags: nextcloud, federated-sharing, ocm, bearer-token, webdav, token-scope, authorization-bypass, oauth-like-flow.cloudHighnextcloudfederated-sharingocmbearer-tokenwebdavtoken-scopeauthorization-bypassoauth-like-flow