HIGHVulnerability
Verified
Global

CISA KEV: ownCloud ownCloud — ownCloud Improper Authentication Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

ownCloud contains an improper authentication vulnerability that allows an attacker to access, modify, or delete any file without authentication if the username of a victim is known, and the victim has no signing-key configured.

Analysis

ownCloud contains an improper authentication vulnerability that allows an attacker to access, modify, or delete any file without authentication if the username of a victim is known, and the victim has no signing-key configured. Added to CISA Known Exploited Vulnerabilities catalog on 2026-08-27. Remediation due: 2026-08-30.

Indicators of Compromise (1)

CVE (1)
CVE-2023-49105
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on Aug 27, 2026. Verified by: CISA.

Related Threats

MEDIUMVulnerabilityNEW

China-Linked Hackers Impersonate AI Experts to Target US Policy Insiders

TA419 posed as AI policymakers and economists to phish US AI policy experts' Microsoft 365 accounts

Infosecurity Magazine
MEDIUMVulnerabilityNEW

Kiteworks patches max severity code injection vulnerability

Secure file-sharing software company Kiteworks has released security updates to address 126 vulnerabilities, including a max-severity flaw affecting its Email Protection Gateway (EPG) security solution. [...]

BleepingComputer
MEDIUMVulnerabilityNEW

CloudSyncD MacOS Backdoor Hides Behind Fake Zoom Installer

CloudSyncD uses a fake Zoom installer to phish Mac passwords and launch a two-stage backdoor

Infosecurity Magazine