CVE-2026-77165PoC

LOWCVSS 6.5 · MEDIUM

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft
Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

File owners were unable to unlock TYPE_TOKEN locks placed by other users, leaving files permanently locked with no recovery path outside of the database.

Back to dashboard

1.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-284

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Threat summary

Public PoC is present in monitored signal
2 mentions across 2 observed days
Momentum state: stable

What's happening

PoC mentioned or linked in 1 signal
Technical details provided in 2 signals
Disclosure: 1 classified signal
Peaked 1d ago at 1 mentions (2026-09-22); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Signal classification2 categories

PoC

150.0%

Disclosure

150.0%

Referenced assets2 URLs

By indicator

Classification over time

Date	Total	Labels

2026-09-22	1	PoC1
2026-10-14	1	Disclosure1

Full discourse2 posts

Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters24d
Disclosure
CVE-2026-77165: files stuck permanently locked, no fix outside DB surgery. CVSS 6.5, unpatched. Audit your TYPE_TOKEN locks now. https://www.valtersit.com/cve/CVE-2026-77165 #CVE #infosec #cybersecurity #CVEALERT #CVE #infosec #Linux #XSS #valtersit #snippet #SysAdmin #cybersecurity #devsecops #devops #developer #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #cybersecurityawareness #cybersecuritynews #cybersecuritytips #python #hacker #kali #ubuntu #debian #docker
Post summary
The tweet discloses CVE-2026-77165 with technical details (files permanently locked, CVSS 6.5, TYPE_TOKEN locks) and a link, but provides no PoC, exploit tool, active exploitation evidence, or named patch/workaround.
0000035
1.1K followersView on X
Hephaestvs@Vulcanux_46d
PoC
csirt_it: ‼️ #PoC #Nextcloud: Disponibile Proof of Concept (PoC) per la CVE-2026-77165 Rischio: 🟠 Tipologia: 🔸 Denial of Service 🔗 https://www.acn.gov.it/portale/w/nextcloud-poc-pubblica-per-lo-sfruttamento-della-cve-2026-77165 ⚠️ Importante mantenere aggiornati i sistemi https://t.co/okpNessDhy
Post summary
The tweet announces the public availability of a Proof of Concept for a Nextcloud Denial of Service vulnerability (CVE-2026-77165) and includes a link to further details.
0000039
638 followersView on X

Explore more

Back to dashboard