CVE-2026-87897
Medium
Description
A SSRF vulnerability found that enables access to internal Chrome Devtools Protocol APIs that can leak the JWT authentication token for another user. A low privileged attacker could continually exploit this vulnerability to leak the JWT authentication token for another user when they start a recording, which then enables the attacker read/write access to the victim's Whiteboard.
SeverityMedium
CVSS4.6
Exploit probability—
Product
Nextcloud Whiteboard
PublishedOct 27, 2026
First seenOct 27, 2026
Weakness typeCWE-918Server-side request forgery (SSRF)
How to fix
Update
- Nextcloud whiteboard1.0.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Nextcloud whiteboard | 1.0.0 | 1.0.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.