CVE-2018-16464: Nextcloud Server

Medium severity, CVSS 5.7. EPSS: 0.9% chance of exploitation in the next 30 days.

A missing access check in Nextcloud Server prior to 14.0.0 could lead to continued access to password protected link shares when the owner had changed the password.

Affected products

• Nextcloud Nextcloud Server: before 14.0.0 (fixed in 14.0.0)

Published 2018-10-30. Last modified 2026-06-17.