{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-84473","assignerOrgId":"37e5125f-f79b-445b-8fad-9564f167944b","state":"PUBLISHED","assignerShortName":"certcc","dateReserved":"2026-09-01T20:18:55.747Z","datePublished":"2026-11-06T18:25:49.272Z","dateUpdated":"2026-11-06T18:25:49.272Z"},"containers":{"cna":{"title":"CVE-2026-84473","descriptions":[{"lang":"en","value":"Authentication Bypass / Missing Brute-Force Protection in remote.php/webdav/ in ownCloud ownCloud server 10.16.3 allows an unauthenticated remote attacker to perform unlimited online password guessing against WebDAV accounts via repeated HTTP Basic Authentication requests to the WebDAV endpoint."}],"source":{"discovery":"UNKNOWN"},"affected":[{"vendor":"Kiteworks","product":"ownCloud","versions":[{"status":"affected","version":"10.16.3","lessThan":"11.1.0","versionType":"custom"}]}],"problemTypes":[{"descriptions":[{"lang":"en","description":"CWE-307"}]},{"descriptions":[{"lang":"en","description":"CWE-288"}]}],"references":[{"url":"https://github.com/KOBUKOVUI/CVE-2026-84473"}],"x_generator":{"engine":"VINCE 4.0.1","env":"prod","origin":"https://cveawg.mitre.org/api/cve/CVE-2026-84473"},"providerMetadata":{"orgId":"37e5125f-f79b-445b-8fad-9564f167944b","shortName":"certcc","dateUpdated":"2026-11-06T18:25:49.272Z"}}}}