Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, when a malicious user has access to a file share of a user, they could use this share token to also access the chunking upload directly and see temporary part files during on going uploads. It is recommended that the Nextcloud Server is upgraded to 32.0.9 or 33.0.3. It is recommended that the Nextcloud Enterprise Server is upgraded to 26.0.13.26, 27.1.11.25, 28.0.14.17, 29.0.16.16, 30.0.17.9, 31.0.14.5, 32.0.9 or 33.0.3
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-45157 Information Disclosure in Nextcloud Server via Share Token Access to Chunked Uploads https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-45157
Post summary
The text announces a new vulnerability (CVE‑2026‑45157) that allows information disclosure in Nextcloud via share token, but does not provide proof of concept, exploit code, active exploitation reports, or remediation details.