Low severity2.6NVD Advisory· Published Jun 1, 2026· Updated Jun 1, 2026

CVE-2026-45154

Description

Nextcloud is an open source content collaboration platform. From version 2.6.0 to before version 4.3.0, when a previous collective pages was deleted and the collective was shared view-only, guests with access to the collective were able to access the deleted pages directly from the trashbin. This issue has been patched in version 4.3.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Nextcloud/Collectivesllm-create
Range: >=2.6.0, <4.3.0

Patches

Vulnerability mechanics

References

github.com/nextcloud/collectives/pull/2432nvd
github.com/nextcloud/security-advisories/security/advisories/GHSA-8mpv-ggq8-hf3wnvd
hackerone.com/reports/3521434nvd

News mentions

Nextcloud Server: 25 Vulnerabilities Disclosed in Single Batch
Vypr Intelligence · Jun 1, 2026

cvss	0.169
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000