← back | CVE Intelligence

CVE-2026-45281 [High]

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2026-45281.

Vendor: Nextcloud
Product: Nextcloud Server / Calendar
Affected versions: Nextcloud Server 32.x < 32.0.9 and 33.x < 33.0.3; affected Enterprise branches 21.x-33.x require their listed security patch
CVSS: 8.1
Coverage Span: 2026-07-17
Reports: 1 related reports

Associated Reports & Timeline

Nextcloud CVE-2026-45281 Cross-Account Calendar Takeover

Ethiack shows CVE-2026-45281: an authorization gap in Nextcloud's CalDAV stack lets any authenticated user join another user's calendar-proxy-write group via PROPPATCH, taking over their calendars.