CVE-2026-45277

CVE

Threat entity extracted from intelligence sources

Frequency

3

occurrences

First Seen

June 1, 2026

Last Seen

June 1, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Nextcloud CVE-2026-45277: Low-Severity Information Disclosure Vulnerability30.9

CVE-2026-45277 is a low-severity vulnerability affecting Nextcloud versions prior to 2.7.2. Authenticated users could exploit this flaw to determine if arbitrary files are linked to specific approval workflows, potentially exposing sensitive metadata. The vulnerability has a CVSS 3.1 base score of 3...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Nextcloud CVE-2026-45277: Low-Severity Information Disclosure Vulnerability

Jun 1·3 sources

Related Articles (3)

CVE-2026-45277 National Vulnerability Database / 3h Nextcloud is an open source content collaboration platform. Prior to version 2.7.2, authenticated users can check if arbitrary files are associated with specific approval workflows where they can request approval. This issue has been patched in version 2.7.2.

nvd.nist.gov·Jun 1

CVE-2026-45277: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor in nextcloud security-advisories Radar - Latest Security Threats / 3h CVE-2026-45277 is a low-severity vulnerability in Nextcloud versions prior to 2. 7. 2 where authenticated users could determine if arbitrary files are linked to specific approval workflows. This exposure of sensitive information does not allow modification or denial of service. The issue has been addressed in Nextcloud version 2. 7. 2. (CVSS: 3

radar.offseq.com·Jun 1

CVE-2026-45277 - Exploits & Severity

Related Entities

Data Breach CWE-200 - Exposure of Sensitive Information CWE-862 - Missing Authorization Nextcloud