Vulnerability record/PUBLISHED/Published Nov 6, 2026 18:25:49 UTC
CVE-2026-84473
Authentication Bypass / Missing Brute-Force Protection in remote.php/webdav/ in ownCloud ownCloud server 10.16.3 allows an unauthenticated remote attacker to perform unlimited online password guessing against WebDAV accounts via repeated HTTP Basic Authentication requests to the WebDAV endpoint.
Base scoreN/A/ 10
SeverityNoneCVSS unscored
Exploitability / impact
CVSS metric breakdown
Base severityNone
No CVSS vector is available for this record.
CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.
Record context
CVE Numbering Authoritycertcc
Last updatedNov 6, 2026 18:25:49 UTC
PublishedNov 6, 2026 18:25:49 UTC
ReservedSep 1, 2026 20:18:55 UTC