CVE-2026-77171 Public Shared Collective Link Allows Unauthorized Page Creation
CVE-2026-77171 Published on October 27, 2026

A public shared collective always allowed recipients of the link to create pages.

NVD

Weakness Type

What is an Authorization Vulnerability?

The software does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

CVE-2026-77171 has been classified to as an Authorization vulnerability or weakness.


Affected Versions

Nextcloud Collectives: