CVE-2026-45153: Nextcloud Security-Advisories

Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days.

Nextcloud is an open source content collaboration platform. From version 33.0.0 to before version 33.1.0, after unlocking a locked Android phone the back-button could be used to bypass the Nextcloud Files app PIN. This issue has been patched in version 33.1.0.

Affected products

• Nextcloud Security-Advisories: from 33.0.0, before 33.1.0 (fixed in 33.1.0)

Published 2026-06-01. Last modified 2026-07-22.