CVE-2026-84473

Full vulnerability record from the local CVENow database.

Description

Authentication Bypass / Missing Brute-Force Protection in remote.php/webdav/ in ownCloud ownCloud server 10.16.3 allows an unauthenticated remote attacker to perform unlimited online password guessing against WebDAV accounts via repeated HTTP Basic Authentication requests to the WebDAV endpoint.

Severity

Not scored

CVSS score

Not available

Vulnerability status

Received

Source identifier

[email protected]

Published

2026-11-06 19:17:57.687000

Last modified

2026-11-06 19:17:57.687000

View original CVE JSON

{
  "id": "CVE-2026-84473",
  "sourceIdentifier": "[email protected]",
  "published": "2026-11-06T19:17:57.687",
  "lastModified": "2026-11-06T19:17:57.687",
  "vulnStatus": "Received",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Authentication Bypass / Missing Brute-Force Protection in remote.php/webdav/ in ownCloud ownCloud server 10.16.3 allows an unauthenticated remote attacker to perform unlimited online password guessing against WebDAV accounts via repeated HTTP Basic Authentication requests to the WebDAV endpoint."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Kiteworks",
          "product": "ownCloud",
          "versions": [
            {
              "version": "10.16.3",
              "lessThan": "11.1.0",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://github.com/KOBUKOVUI/CVE-2026-84473",
      "source": "[email protected]"
    }
  ]
}