CVE-2026-77171

A public shared collective always allowed recipients of the link to create pages.

CVSS 3.0

3.5CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

CWE

CWE-284

Published

2026-10-27

Modified

2026-10-27

Record from

the CVE List, synced 2026-10-27

Affected

• nextcloud:collectives

References

• https://hackerone.com/reports/3533697

Check your stackJSON