CVE-2026-77166lowCWE-840

CVE-2026-77166: low-severity vulnerability in Nextcloud Collectives

Published

Follow this CVE+ Monitor Collectives

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 2.4epss 0.3%
The emoji field in the page emoji update endpoint does not properly validate user input. By injecting long text and line breaks, the sidebar layout becomes broken and can hide other items.
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
Affected products
Nextcloud · Collectives
Related CVEs — Nextcloud Collectives

In the same product, most dangerous first.

CVE-2026-77171LOWCVE-2026-77171EPSS 0.2%