CVE-2026-84473
CVE-2026-84473
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Authentication Bypass / Missing Brute-Force Protection in remote.php/webdav/ in ownCloud ownCloud server 10.16.3 allows an unauthenticated remote attacker to perform unlimited online password guessing against WebDAV accounts via repeated HTTP Basic Authentication requests to the WebDAV endpoint.
| Vendor | kiteworks |
| Product | owncloud |
| Published | Nov 6, 2026 |
Stay Ahead of the Next One
Get instant alerts for kiteworks owncloud
Be the first to know when new unknown vulnerabilities affecting kiteworks owncloud are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Kiteworks / ownCloud
10.16.3 < 11.1.0