Cbcoutinho Nextcloud-mcp-server vulnerabilities

• cbcoutinho nextcloud-mcp-server Nextcloud MCP Server: Unauthenticated `POST /webhooks/nextcloud` allows arbitrary vector data deletion when `WEBHOOK_SECRET` is unset ( default ) CVE-2026-55640 Fix available 9.1 CriticalAugust 25, 2026