CVE-2026-107059

EUVD-2026-113255
An issue in Nextcloud versionCode 30390190 allows attackers to force victim users to logout of their accounts and switch to an attacker controlled progile, bypassing authentication.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
UNKNOWN
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
References
https://f-droid.org/packages/com.nextcloud.client/
https://github.com/FFG0d/fdroid-android-advisories/blob/main/advisories/CVE-2026-107059.md
https://github.com/nextcloud/android