Nextcloud Tables vulnerabilities

• nextcloud tables The user in a group can bypass the group restriction set by an administrator on link sharing, creating share links for a table even though they shouldn't have that permission. CVE-2026-82986 4.6 MediumOctober 27, 2026
• nextcloud tables The Tables app's share-listing endpoint (GET /apps/tables/share/table/{tableId}) did not verify that the requesting user has manage-level permission on the table before returning the full list of shar… CVE-2026-82983 3.3 LowOctober 27, 2026
• nextcloud tables, kiteworks security-advisories +1 more Nextcloud: Tables app allows limited SQLi in ORDER BY with malicious sort order argument for Table Views CVE-2026-45722 7.1 HighJune 1, 2026
• nextcloud tables, kiteworks security-advisories +1 more Nextcloud: SQL Injection in Column Type Parameter Allows Arbitrary SQL Execution CVE-2026-45545 8.2 HighJune 1, 2026
• nextcloud tables, kiteworks security-advisories +1 more Nextcloud: Information Disclosure of view filter metdata via Broken Sensitive Data Masking in ViewService CVE-2026-45544 4.3 MediumJune 1, 2026
• nextcloud tables, kiteworks security-advisories +1 more Nextcloud Tables app allowed users to view columns metadata information of any table CVE-2025-66553 4.3 MediumDecember 5, 2025
• nextcloud tables, kiteworks security-advisories +1 more Nextcloud Tables is missing an ownership check which allows moving columns into tables of other users CVE-2025-66551 6.3 MediumDecember 5, 2025
• nextcloud tables, kiteworks security-advisories +1 more Nextcloud Tables app share information not limited to relevant users CVE-2025-66513 4.3 MediumDecember 5, 2025
• nextcloud tables, kiteworks security-advisories +1 more Share information of the Nextcloud Tables app is not limited to affected users CVE-2024-52507 3.5 LowNovember 15, 2024
• nextcloud tables, kiteworks security-advisories +1 more Nextcloud Tables has an Authorization Bypass Through User-Controlled Key in Tables CVE-2024-52511 6.3 MediumNovember 15, 2024