CVE-2026-45264

CVE

Threat entity extracted from intelligence sources

Frequency

4

occurrences

First Seen

June 1, 2026

Last Seen

June 1, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Nextcloud ACL Rename Permission Bypass Vulnerability Disclosed45.9

A new vulnerability, CVE-2026-45264, has been identified in Nextcloud, an open-source content collaboration platform. This flaw affects versions 17.0.0 to before 17.0.15, 18.0.0 to before 18.1.12, 19.0.0 to before 19.1.16, 20.0.0 to before 20.1.11, and 21.0.0 to before 21.0.4. Users with READ and CR...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Nextcloud ACL Rename Permission Bypass Vulnerability Disclosed

Jun 1·4 sources

Related Articles (4)

Nextcloud: ACL Rename Permission Bypass in Team Folders Allows Unauthorized F... CVE: New / 4h Nextcloud is an open source content collaboration platform.

cve.threatint.eu·Jun 1

CVE-2026-45264: Nextcloud: ACL Rename Permission Bypass in Team Folders Allows Unauthorized File Renames [MEDIUM] CVSS 4.3 Exploit Intelligence — Recent CVEs / 3h Nextcloud is an open source content collaboration platform. From versions 17.0.0 to before 17.0.15, 18.0.0 to before 18.1.12, 19.0.0 to before 19.1.16, 20.0.0 to before 20.1.11, and 21.0.0 to before 21.0.4, a user with READ and CREATE permission, but no UPDATE permission for a team folder can rename

exploit-intel.com·Jun 1

CVE-2026-45264 AKAOMA CVE VULNERABILITIES / 3h Nextcloud is an open source content collaboration platform. From versions 17.0.0 to before 17.0.15, 18.0.0 to before 18.1.12, 19.0.0 to before 19.1.16, 20.0.0 to before 20.1.11, and 21.0.0 to before 21.0.4, a user with READ and CREATE permission, but no UPDATE permission for a team folder can rename files in the team folder. This issue has been patched in versions 17.0.15, 18.1.12, 19.1.16, 20.1.11, and 21.0.4.

cve.akaoma.com·Jun 1

CVE-2026-45264 - Exploits & Severity

Related Entities

CWE-862 - Missing Authorization Nextcloud ACL Rename Permission Bypass In Team Folders