VYPR
← All advisories
Medium severity4.6NVD Advisory· Published Jun 1, 2026· Updated Jun 3, 2026

CVE-2026-45284

CVE-2026-45284

Description

Nextcloud is an open source content collaboration platform. From version 1.3.6 to before version 8.4.0, an improper check allowed users that where provided by LDAP to still authenticate towards user OIDC after they where deleted. This issue has been patched in version 8.4.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Nextcloud/User Oidc2 versions
    cpe:2.3:a:nextcloud:user_oidc:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:nextcloud:user_oidc:*:*:*:*:*:*:*:*range: >=1.3.6,<8.4.0
    • (no CPE)range: 1.3.6 to <8.4.0
  • Nextcloud/Nextcloudllm-fuzzy
    Range: 1.3.6 to <8.4.0

Patches

Vulnerability mechanics

References

3

News mentions

1