← Vulnerability Intelligence

CVE-2026-107059

Not yet rated

Not yet rated — under the NVD policy in effect since April 2026, most CVEs are no longer analyzed immediately. The EPSS score (if available) is still shown.

Description

An issue in Nextcloud versionCode 30390190 allows attackers to force victim users to logout of their accounts and switch to an attacker controlled progile, bypassing authentication.

Metrics

EPSS — exploit probability
0% (percentile: 10) as of 2 November 2026

References