CVE-2026-68493

EUVD-2026-82623
After guessing a 62^15 complex unique identifier, a malicious logged in user was able to retrieve a list of memberships for a circle they are not a member of.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
hackeroneCNA
3.1 LOW
NETWORK
HIGH
LOW
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 3.75%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
nextcloudnextcloud
32.0.0 ≤
𝑥
≤ 34.0.0
CNA
Common Weakness Enumeration
References
https://hackerone.com/reports/3484601