CVE-2026-45266

LowCVSS 3.5

Published: 01/06/2026(UTC)Updated: 22/07/2026(UTC)Translated: 23/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

10th percentile - higher than 10% of all known CVEs

Summary

In Nextcloud prior to versions 21.1.10, 22.0.11, and 23.0.3, a low-privileged user can force other users' microphones to be muted in calls when no High-performance Backend is installed.

Risk Assessment

An attacker can disrupt voice communication by muting participants in calls.

Recommendation

Update Nextcloud to version 21.1.10, 22.0.11, 23.0.3 or later.

Original NVD description (English source)

Nextcloud is an open source content collaboration platform. Prior to versions 21.1.10, 22.0.11, and 23.0.3, a low-privileged user can force other user's microphones to be muted in calls when no High-performance Backend is installed. This issue has been patched in versions 21.1.10, 22.0.11, and 23.0.3.