CVE-2026-77172

No fix known CVSS 5.3

App passwords were allowed to bypass password confirmation on sensitive endpoints.

Published 2026-10-27 · CVE record · OSV

Products: nextcloud server