Is CVE-2026-45722 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-45722 being exploited in the wild.

How severe is CVE-2026-45722?

High severity, with a CVSS score of 7.1, published 1 June 2026.

Which products and versions are affected?

Nextcloud Tables 0.9.0 to 0.9.6, 1.0.0 to 1.0.1.

Is there a fix for CVE-2026-45722?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-45722 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-45722?

Check whether you run Nextcloud Tables at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-45722: Nextcloud Tables SQL injection in ORDER BY statement

CVE-2026-45722 · Severity: high · CVSS 7.1 · Published 2026-06-01

Nextcloud is an open-source collaboration platform, and its Tables app allows users to manage structured data. A security flaw in the Tables app allows an authorized user to perform a limited SQL injection attack. While the attack is restricted in scope, it could be used to slowly extract sensitive information from the database or cause performance delays, potentially impacting data confidentiality and system responsiveness.

Technologies: Nextcloud Tables. Vendors: Nextcloud.

Quick answers

Is CVE-2026-45722 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-45722 being exploited in the wild.
How severe is CVE-2026-45722?: High severity, with a CVSS score of 7.1, published 1 June 2026.
Which products and versions are affected?: Nextcloud Tables 0.9.0 to 0.9.6, 1.0.0 to 1.0.1.
Is there a fix for CVE-2026-45722?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-45722 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-45722?: Check whether you run Nextcloud Tables at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A SQL injection vulnerability exists in the Nextcloud Tables app (versions 0.9.0-0.9.6 and 1.0.0-1.0.1) due to improper neutralization of special elements in the ORDER BY statement of a database query. An attacker with access to the Tables app can provide a malicious sort order argument to perform a blind SQL injection. This specific injection is limited to extracting a single bit of information per request or executing time-based attacks (making the database wait). The vulnerability is tracked as CWE-89 and has been patched in versions 0.9.7 and 1.0.2.

Affected products

Nextcloud Tables 0.9.0 to 0.9.6, 1.0.0 to 1.0.1

Timeline

2025-12-05: other: Initial code refactor and cleanup pull request submitted
2026-05-13: advisory: Nextcloud security advisory published
2026-06-01: disclosed: CVE-2026-45722 published to NVD

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.