CVE-2026-45153

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-45153", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-05-08T20:44:38.964Z", "datePublished": "2026-06-01T16:37:12.319Z", "dateUpdated": "2026-06-01T17:53:36.647Z"}, "containers": {"cna": {"title": "Nextcloud: PIN bypass in PassCodeActivity via back button", "problemTypes": [{"descriptions": [{"cweId": "CWE-287", "lang": "en", "description": "CWE-287: Improper Authentication", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "PHYSICAL", "availabilityImpact": "NONE", "baseScore": 4.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-2w7v-5299-3hw5", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-2w7v-5299-3hw5"}, {"name": "https://github.com/nextcloud/android/pull/16896", "tags": ["x_refsource_MISC"], "url": "https://github.com/nextcloud/android/pull/16896"}, {"name": "https://hackerone.com/reports/3625210", "tags": ["x_refsource_MISC"], "url": "https://hackerone.com/reports/3625210"}], "affected": [{"vendor": "nextcloud", "product": "security-advisories", "versions": [{"version": ">= 33.0.0, < 33.1.0", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-06-01T16:37:12.319Z"}, "descriptions": [{"lang": "en", "value": "Nextcloud is an open source content collaboration platform. From version 33.0.0 to before version 33.1.0, after unlocking a locked Android phone the back-button could be used to bypass the Nextcloud Files app PIN. This issue has been patched in version 33.1.0."}], "source": {"advisory": "GHSA-2w7v-5299-3hw5", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-06-01T17:53:30.524011Z", "id": "CVE-2026-45153", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-01T17:53:36.647Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-45153", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-01T17:53:30.524011Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-01T17:53:33.595Z"}}], "cna": {"title": "Nextcloud: PIN bypass in PassCodeActivity via back button", "source": {"advisory": "GHSA-2w7v-5299-3hw5", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.6, "attackVector": "PHYSICAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "nextcloud", "product": "security-advisories", "versions": [{"status": "affected", "version": ">= 33.0.0, < 33.1.0"}]}], "references": [{"url": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-2w7v-5299-3hw5", "name": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-2w7v-5299-3hw5", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/nextcloud/android/pull/16896", "name": "https://github.com/nextcloud/android/pull/16896", "tags": ["x_refsource_MISC"]}, {"url": "https://hackerone.com/reports/3625210", "name": "https://hackerone.com/reports/3625210", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "Nextcloud is an open source content collaboration platform. From version 33.0.0 to before version 33.1.0, after unlocking a locked Android phone the back-button could be used to bypass the Nextcloud Files app PIN. This issue has been patched in version 33.1.0."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-287", "description": "CWE-287: Improper Authentication"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-06-01T16:37:12.319Z"}}}, "cveMetadata": {"cveId": "CVE-2026-45153", "state": "PUBLISHED", "dateUpdated": "2026-06-01T17:53:36.647Z", "dateReserved": "2026-05-08T20:44:38.964Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-06-01T16:37:12.319Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "security-advisories", "vendor": "nextcloud", "versions": [{"status": "affected", "version": ">= 33.0.0, < 33.1.0"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Nextcloud is an open source content collaboration platform. From version 33.0.0 to before version 33.1.0, after unlocking a locked Android phone the back-button could be used to bypass the Nextcloud Files app PIN. This issue has been patched in version 33.1.0."}, {"lang": "es", "value": "Nextcloud es una plataforma de colaboraci\u00f3n de contenido de c\u00f3digo abierto. Desde la versi\u00f3n 33.0.0 hasta antes de la versi\u00f3n 33.1.0, despu\u00e9s de desbloquear un tel\u00e9fono Android bloqueado, el bot\u00f3n de retroceso podr\u00eda usarse para eludir el PIN de la aplicaci\u00f3n Nextcloud Files. Este problema ha sido parcheado en la versi\u00f3n 33.1.0."}], "id": "CVE-2026-45153", "lastModified": "2026-07-22T07:10:00.107", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "PHYSICAL", "availabilityImpact": "NONE", "baseScore": 4.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 0.4, "impactScore": 4.2, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-45153", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-06-01T17:53:30.524011Z", "version": "2.0.3"}}]}, "published": "2026-06-01T17:17:08.860", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/nextcloud/android/pull/16896"}, {"source": "security-advisories@github.com", "url": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-2w7v-5299-3hw5"}, {"source": "security-advisories@github.com", "url": "https://hackerone.com/reports/3625210"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-287"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[33.0.0,33.1.0)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "security-advisories", "source": "cna", "vendor": "nextcloud"}, "product": "android", "vendor": "nextcloud"}], "created": "2026-06-01T18:45:34.649927+00:00", "updated": "2026-06-02T20:54:10.149242+00:00", "vendors": ["nextcloud", "nextcloud$PRODUCT$android"]}