Authentication Bypass Vulnerability in ownCloud Server by ownCloud

CVE-2026-84473

What is CVE-2026-84473?

The vulnerability in ownCloud server 10.16.3 enables an unauthenticated remote attacker to exploit the WebDAV feature. By sending repeated HTTP Basic Authentication requests to the WebDAV endpoint, the attacker can perform unlimited password attempts, making it susceptible to brute-force attacks. This flaw stems from insufficient protection mechanisms, allowing unauthorized access attempts against WebDAV accounts without any limitations.

References