CVE-2026-45153 — Nextcloud: PIN bypass in PassCodeActivity via back button
Nextcloud is an open source content collaboration platform. From version 33.0.0 to before version 33.1.0, after unlocking a locked Android phone the back-button could be used to…
Published: 2026-06-01 · CVSS: 4.6 · CVSS 3.1
Nextcloud is an open source content collaboration platform. From version 33.0.0 to before version 33.1.0, after unlocking a locked Android phone the back-button could be used to bypass the Nextcloud Files app PIN. This issue has been patched in version 33.1.0.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7