Live › vulnerability › CVE-2026-107059
A flaw in Nextcloud versionCode 30390190 lets an attacker force a victim's account to log out and switch it to an attacker-controlled profile. The sources describe this as bypassing authentication.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 17:26 UTC. All times on this page are UTC.
Teams that run a self-hosted Nextcloud instance on the affected build are exposed. The sources do not say which configurations or account types are needed, so unknown.
No product ranges from the sources yet.
occ statusNo fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An issue in Nextcloud versionCode 30390190 allows attackers to force victim users to logout of their accounts and switch to an attacker controlled progile, bypassing authentication.
This page as .md · .json · in your agent: get_signal("CVE-2026-107059")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.