Nextcloud Mail vulnerabilities

• mikel mail Mail: Email address spoofing via malformed RFC 2047 encoded-words CVE-2026-63435 Fix available 5.3 MediumSeptember 1, 2026
• nextcloud mail, kiteworks security-advisories +1 more Nextcloud Mail stored HTML injection in subject text CVE-2025-66514 3.5 LowDecember 5, 2025
• nextcloud mail, kiteworks security-advisories +1 more Nextcloud Mail app does not respect download permissions in shares CVE-2024-52509 3.5 LowNovember 15, 2024
• nextcloud mail, kiteworks security-advisories +1 more Nextcloud Mail auto configurator can be tricked into sending account information to wrong servers CVE-2024-52508 8.2 HighNovember 15, 2024
• nextcloud mail, kiteworks security-advisories +1 more Nextcloud Mail app vulnerable to Server-Side Request Forgery CVE-2023-48307 3.5 LowNovember 21, 2023
• nextcloud mail, kiteworks security-advisories +1 more Require strict cookies for image proxy requests in Nextcloud Mail CVE-2023-45660 4.3 MediumOctober 16, 2023
• nextcloud mail, kiteworks security-advisories +1 more Blind SSRF in the Nextcloud Mail app on avatar endpoint CVE-2023-33184 3.5 LowMay 27, 2023
• nextcloud mail, kiteworks security-advisories +1 more IDOR Vulnerability in Nextcloud Mail CVE-2023-25160 4.1 MediumFebruary 13, 2023
• nextcloud mail, kiteworks security-advisories +1 more Blind SSRF via server URL input in the Nextcloud Mail app CVE-2023-23943 5.0 MediumFebruary 6, 2023
• nextcloud mail, kiteworks security-advisories +1 more Nexcloud Mail app temporarily stores cleartext password in database CVE-2023-23944 2.0 LowFebruary 6, 2023
• nextcloud mail, kiteworks security-advisories +1 more Password disclosure in log file in Nextcloud Mail App CVE-2022-31119 3.1 LowAugust 4, 2022
• nextcloud mail, kiteworks security-advisories +1 more Unauthenticated SSRF in 3rd party module "cerdic/csstidy" CVE-2022-31132 8.3 HighAugust 4, 2022
• kiteworks security-advisories, nextcloud mail +1 more Ownership check missing when updating or deleting mail attachments in Nextcloud mail CVE-2022-31131 5.4 MediumJuly 6, 2022
• nextcloud mail, kiteworks security-advisories +1 more Bypass of image blocking in Nextcloud Mail CVE-2021-39220 3.5 LowOctober 25, 2021
• nextcloud mail, kiteworks security-advisories +1 more Bypass of image blocking in Nextcloud Mail CVE-2021-32707 4.3 MediumJuly 12, 2021
• nextcloud mail, kiteworks security-advisories +1 more Missing permission check on email metadata retrieval CVE-2021-32652 8.8 HighJune 1, 2021
• nextcloud mail, fedoraproject fedora +1 more A missing verification of the TLS host in Nextcloud Mail 1.1.3 allowed a man in the middle attack. CVE-2020-8156 7.0 HighMay 12, 2020