Nextcloud vulnerabilities

Products

• Security-advisories 260
• Server 189
• Nextcloud 30
• Desktop 27
• Talk 20
• Deck 18
• Mail 16
• Server 15
• Server 11
• Calendar 10
• Tables 10
• Richdocuments 9
• User Oidc 9
• Flow 8
• Contacts 7
• Com.nextcloud.client 6
• Enterprise Server 6
• Approval 4
• Circles 3
• Group Folders 3
• Collectives 2
• End-to-end Encryption 2
• Guests 2
• News 2
• Mail 2
• Talk 2
• Notes 2
• Openid Connect User Backend 2
• Preferred Providers 2
• Social 2

Newest

• nextcloud whiteboard A SSRF vulnerability found that enables access to internal Chrome Devtools Protocol APIs that can leak the JWT authentication token for another user. A low privileged attacker could continually exploi… CVE-2026-87897 4.6 MediumOctober 27, 2026
• nextcloud tables The user in a group can bypass the group restriction set by an administrator on link sharing, creating share links for a table even though they shouldn't have that permission. CVE-2026-82986 4.6 MediumOctober 27, 2026
• devolutions server When a team was configured as "visible to everyone", the web UI correctly blocked non-members from viewing the team ("You are not a member of ..."), but the resources API endpoint could still be calle… CVE-2026-82984 4.3 MediumOctober 27, 2026
• nextcloud tables The Tables app's share-listing endpoint (GET /apps/tables/share/table/{tableId}) did not verify that the requesting user has manage-level permission on the table before returning the full list of shar… CVE-2026-82983 3.3 LowOctober 27, 2026
• nextcloud files confidential A user could create a docx or odt file with a # in the filename with confidential information such as a credit card number and have it not be marked as confidential. CVE-2026-77173 4.3 MediumOctober 27, 2026
• devolutions server App passwords were allowed to bypass password confirmation on sensitive endpoints. CVE-2026-77172 5.3 MediumOctober 27, 2026
• nextcloud collectives A public shared collective always allowed recipients of the link to create pages. CVE-2026-77171 3.5 LowOctober 27, 2026
• devolutions server Abusing the federated share endpoint, an attacker can write arbitrary rows into the oc_share_external database table. These rows persist indefinitely — there is no automatic cleanup mechanism. Three d… CVE-2026-77167 7.5 HighOctober 27, 2026
• nextcloud richdocuments A missing token type check allowed to retrieve more additional information about the WOPI configuration with a user or guest token. CVE-2026-67400 3.5 LowOctober 27, 2026
• flarum framework, nextcloud flow, vaadin +2 more Push Endpoint Returns Permissive CORS Headers CVE-2026-110737 2.3 LowOctober 27, 2026
• nextcloud collectives The emoji field in the page emoji update endpoint does not properly validate user input. By... CVE-2026-77166 2.4 LowSeptember 21, 2026
• devolutions server File owners were unable to unlock TYPE_TOKEN locks placed by other users, leaving files... CVE-2026-77165 Fix available 6.5 MediumSeptember 21, 2026
• devolutions server The Photos app's filter-based "smart albums" build their file listing using the search... CVE-2026-82985 Fix available 6.5 MediumSeptember 18, 2026
• nextcloud approval The Approval app's approve/reject endpoint is meant to require the file's current etag as a... CVE-2026-82982 4.3 MediumSeptember 18, 2026
• nextcloud files lock Any authenticated user can lock or unlock files they do not own by targeting absolute WebDAV... CVE-2026-82980 6.3 MediumSeptember 18, 2026
• nextcloud deck The Deck config API allows authenticated users to set board-scoped configuration keys for... CVE-2026-77170 4.3 MediumSeptember 18, 2026
• nextcloud team folders A vulnerability in the team folders (formerly group folders) app when used in combination with... CVE-2026-77169 6.5 MediumSeptember 18, 2026
• devolutions server Circles' remote-instance signature verification fetches the attacker-supplied keyId URL before... CVE-2026-77164 Fix available 6.2 MediumSeptember 18, 2026
• devolutions server After guessing a 62^15 complex unique identifier, a malicious logged in user was able to retrieve... CVE-2026-68493 Fix available 3.1 LowSeptember 18, 2026
• mikel mail Mail: Email address spoofing via malformed RFC 2047 encoded-words CVE-2026-63435 Fix available 5.3 MediumSeptember 1, 2026
• elated-themes flow WordPress Flow theme <= 1.8 - Local File Inclusion vulnerability CVE-2026-57793 7.5 HighJuly 13, 2026
• nextcloud server, kiteworks security-advisories +1 more Nextcloud: Propfind requests for file comments allowed to load comments for other files CVE-2026-45810 Fix available 6.8 MediumJune 1, 2026
• nextcloud tables, kiteworks security-advisories +1 more Nextcloud: Tables app allows limited SQLi in ORDER BY with malicious sort order argument for Table Views CVE-2026-45722 7.1 HighJune 1, 2026
• nextcloud server, kiteworks security-advisories +1 more Nextcloud: Bypass of second factor authentication on DAV endpoints CVE-2026-45691 Fix available 5.9 MediumJune 1, 2026
• nextcloud server, kiteworks security-advisories +1 more Nextcloud: Two-Factor Authentication Bypass via Pending Session Token Replay CVE-2026-45690 Fix available 5.9 MediumJune 1, 2026
• nextcloud tables, kiteworks security-advisories +1 more Nextcloud: SQL Injection in Column Type Parameter Allows Arbitrary SQL Execution CVE-2026-45545 8.2 HighJune 1, 2026
• nextcloud tables, kiteworks security-advisories +1 more Nextcloud: Information Disclosure of view filter metdata via Broken Sensitive Data Masking in ViewService CVE-2026-45544 4.3 MediumJune 1, 2026
• nextcloud forms, kiteworks security-advisories +1 more Nextcloud: Deleting a Forms collaborator share leaves uploaded response files accessible through a lingering Files share CVE-2026-45543 5.3 MediumJune 1, 2026
• nextcloud calendar, kiteworks security-advisories +1 more Nextcloud: Calendar app leaked user identifiers via attendee suggestion endpoint CVE-2026-45286 4.3 MediumJune 1, 2026
• nextcloud user oidc, kiteworks security-advisories +1 more Nextcloud: Wrong condition in the User OIDC app's LdapService allowed deleted LDAP users to authenticate CVE-2026-45284 4.6 MediumJune 1, 2026
• kiteworks security-advisories, nextcloud server +1 more Nextcloud: Hidden Public Link creation when sharing to a Team External Member CVE-2026-45285 6.4 MediumJune 1, 2026
• nextcloud server, kiteworks security-advisories +1 more Nextcloud: Files Lock app allows users to lock and unlock files of other users CVE-2026-45283 6.3 MediumJune 1, 2026
• nextcloud server, kiteworks security-advisories +1 more Nextcloud: Logged-in user bypasses share password and download restrictions on Text attachments via documentId leads to unauthorized file access CVE-2026-45282 6.5 MediumJune 1, 2026
• nextcloud server, kiteworks security-advisories +1 more Nextcloud: Cross-Account Calendar Takeover via Unauthorized Group-Member-Set Update CVE-2026-45281 Fix available 8.1 HighJune 1, 2026
• nextcloud server, kiteworks security-advisories +1 more Nextcloud: Limited path traversal via template API if using `{lang}` in config CVE-2026-45279 4.4 MediumJune 1, 2026
• nextcloud user oidc, kiteworks security-advisories +1 more Nextcloud: Open Redirect in user_oidc login flow via protocol-relative URL bypass CVE-2026-45278 3.3 LowJune 1, 2026
• nextcloud approval, kiteworks security-advisories +1 more Nextcloud: Information disclosure in Nextcloud Approval app via fileId parameter reveals workflow associations CVE-2026-45277 3.3 LowJune 1, 2026
• nextcloud approval, kiteworks security-advisories +1 more Nextcloud: Authorization bypass in approval feature allows unauthorized file sharing with approvers CVE-2026-45275 6.5 MediumJune 1, 2026
• kiteworks security-advisories Nextcloud: Missing permission check for from submissions CVE-2026-45267 6.5 MediumJune 1, 2026
• kiteworks security-advisories Nextcloud: Unauthorized force-mute from missing permission check when using internal signaling CVE-2026-45266 3.5 LowJune 1, 2026
• kiteworks security-advisories Nextcloud: Files drop share links for end-to-end encrypted folders allowed to drop files into other folders of the share owner CVE-2026-45159 3.5 LowJune 1, 2026
• kiteworks security-advisories Nextcloud: Valid share tokens allow to access tempory upload files of share owner CVE-2026-45157 Fix available 6.3 MediumJune 1, 2026
• kiteworks security-advisories Nextcloud: Authentication Bypass in ID4me handling via Missing JWT Signature Verification in User OIDC CVE-2026-45156 Public exploit 8.1 HighJune 1, 2026
• kiteworks security-advisories Nextcloud: Private circle can be added to another circle via API CVE-2026-45155 2.6 LowJune 1, 2026
• kiteworks security-advisories Nextcloud: Improper Access Control in Collectives CVE-2026-45154 2.6 LowJune 1, 2026
• kiteworks security-advisories Nextcloud: PIN bypass in PassCodeActivity via back button CVE-2026-45153 Fix available 4.6 MediumJune 1, 2026
• kiteworks security-advisories Nextcloud: ACL Rename Permission Bypass in Team Folders Allows Unauthorized File Renames CVE-2026-45264 4.3 MediumJune 1, 2026
• nextcloud flow Possible information disclosure of environment variables in Vaadin Build Plugins via Failed Frontend Build CVE-2026-7860 Fix available 1.6 LowMay 19, 2026
• nextcloud news Nextcloud News: Authenticated blind SSRF via feed URL CVE-2026-44515 2.3 LowMay 14, 2026
• nextcloud flow, windmill, windmill labs ce (community edition) +1 more +3 more Windmill < 1.615.0 Operator Role Missing Authorization Checks RCE CVE-2026-22683 8.7 HighApril 7, 2026
• Show olderLoading…