{"affected":[{"defaultStatus":"unaffected","product":"whiteboard","source":"CNA: hackerone","vendor":"Nextcloud","versions":[{"lessThan":"1.0.0","status":"affected","version":"1.0.0","versionType":"semver"}]}],"cveId":"CVE-2026-87897","cwes":["CWE-918"],"description":"A SSRF vulnerability found that enables access to internal Chrome Devtools Protocol APIs that can leak the JWT authentication token for another user. A low privileged attacker could continually exploit this vulnerability to leak the JWT authentication token for another user when they start a recording, which then enables the attacker read/write access to the victim's Whiteboard.","epss":{"date":"2026-11-04","percentile":0.10352,"score":0.00203},"exploits":[],"kev":null,"metrics":[{"score":4.6,"severity":"medium","source":"CNA: hackerone","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","version":"3.0"}],"modifiedAt":1793815142350,"publishedAt":1793117734742,"references":[{"source":"CNA: hackerone","tags":[],"url":"https://hackerone.com/reports/3576823"}],"remediation":[],"revision":"29ac0656ce04e0235b84f28e420db02ef59edc11fa3f3d7e7c56208215c0fa5b","sources":[{"modifiedAt":1793815142350,"name":"CNA: hackerone","retrievedAt":1793815913745,"url":"https://www.cve.org/CVERecord?id=CVE-2026-87897"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793815923461,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-87897"}],"ssvc":{"assessedAt":1793815132045,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"CVE-2026-87897","updatedAt":1793815923461}