CVE-2026-84473 is an authentication bypass vulnerability in Kiteworks ownCloud server versions 10.16.3 up to but not including 11.1.0. It allows unauthenticated remote attackers to perform unlimited online password guessing attacks against WebDAV accounts by repeatedly sending HTTP Basic Authentication requests to the WebDAV endpoint. This vulnerability is due to improper restriction of excessive authentication attempts, lacking brute-force protection.