{"id":"CVE-2026-45722","title":"Nextcloud is an open source content collaboration platform","summary":"Nextcloud is an open source content collaboration platform. From versions 0.9.0 to before 0.9.7, and 1.0.0 to before 1.0.2, a missing sanitization in the Tables app allowed a user with access to the tables app to perform a limited SQL in…","severity":"high","cvss":7.1,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","cwe":["CWE-89"],"vendor":"nextcloud","product":"tables","affected":["tables >= 0.9.0, < 0.9.7","tables >= 1.0.0, < 1.0.2"],"patched":["tables 1.0.2"],"published":"2026-06-01","updated":"2026-07-22","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-45722","references":[{"url":"https://github.com/nextcloud/security-advisories/security/advisories/GHSA-5h2w-c7px-hp4j","label":"security-advisories@github.com"},{"url":"https://github.com/nextcloud/tables/pull/2186","label":"security-advisories@github.com"},{"url":"https://hackerone.com/reports/3446689","label":"security-advisories@github.com"}],"tags":["nvd"],"epss":0.00301,"epssPercentile":0.23059,"ingestedAt":"2026-07-23T07:14:46.601Z","slug":"CVE-2026-45722","body":"## Overview\n\nNextcloud is an open source content collaboration platform. From versions 0.9.0 to before 0.9.7, and 1.0.0 to before 1.0.2, a missing sanitization in the Tables app allowed a user with access to the tables app to perform a limited SQL injection in the ORDER BY statement of a query. Compared to normal SQL injections, the ORDER BY is limited to extracting a single bit of information per request or to make the database wait for a given time. This issue has been patched in versions 0.9.7 and 1.0.2.\n\n## Affected\n\n- `tables >= 0.9.0, < 0.9.7`\n- `tables >= 1.0.0, < 1.0.2`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `tables 1.0.2`","depth":"twilight","depthScore":39,"depthScoreParts":{"impact":39.1,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}