{"apiVersion":"1","notice":"Security Threat Pulse API v1. Free, no key. Facts with sources; verdicts follow the published rules at https://securitythreatpulse.com/methodology. Not advice. Some source data is withheld here until its terms allow re-serving.","generatedAt":"2026-11-11T08:30:30.425Z","products":["owncloud"],"actNowTotal":1,"results":[{"query":"owncloud","matched":1,"actNow":1,"events":[{"id":"kev-2026-08-27-owncloud-owncloud","url":"https://securitythreatpulse.com/events/kev-2026-08-27-owncloud-owncloud","title":"ownCloud: attackers can get in without a password","verdict":"act_now","verdictReason":"Attacks are confirmed. The severity score is critical (9.8).","tier":null,"rankScore":null,"rankWhy":null,"rulesVersion":"v2","ladder":{"talk":"none","damage":"none","attempts":"confirmed","exposure":"none","exploited":"confirmed"},"untrackedRungs":["exposure","damage"],"cves":["CVE-2023-49105"],"vendor":"ownCloud","product":"ownCloud","affectedProducts":[{"vendorKey":"owncloud","productKey":"owncloud","vendor":"ownCloud","product":"ownCloud","slug":"owncloud/owncloud","kind":"direct","evidence":["kev"]}],"category":{"id":"collaboration","label":"Documents and collaboration","why":"It holds shared documents and internal pages.","doThis":"Patch it, or ask your provider whether they have."},"summary":"ownCloud contains an improper authentication vulnerability that allows an attacker to access, modify, or delete any file without authentication if the username of a victim is known, and the victim has no signing-key configured.","cvss":9.8,"epss":0.4319,"exploitMaturity":"poc","kevListed":true,"kevDateAdded":"2026-08-27","kevDueDate":"2026-08-30","firstSeenAt":"2026-08-27T00:00:00.000Z","updatedAt":"2026-10-26T03:37:40.509Z","newestEvidenceAt":"2026-08-27T00:00:00.000Z"}]}]}