CVE-2026-45282 | Nextcloud Server up to 32.0.8/33.0.2 Password Protect access control (GHSA-35fx-69q6-xpjr)

A vulnerability classified as critical has been found in Nextcloud Server up to 32.0.8/33.0.2. The impacted element is an unknown function of the component Password Protect Handler. Performing a manipulation results in improper access controls.

This vulnerability is reported as CVE-2026-45282. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More