Nextcloud Talk vulnerabilities

• nextcloud talk, kiteworks security-advisories +1 more Nextcloud talk allows participants to blindly delete poll drafts of other users by ID CVE-2025-66556 3.5 LowDecember 5, 2025
• nextcloud talk, kiteworks security-advisories +1 more Password of talk conversations can be bruteforced in Nextcloud CVE-2023-45149 4.3 MediumOctober 16, 2023
• nextcloud talk, kiteworks security-advisories +1 more Path traversal allows tricking the Talk Android app into writing files into it's root directory CVE-2023-39957 7.2 HighAugust 10, 2023
• nextcloud talk, kiteworks security-advisories +1 more Chat poll data can still be queried from API after purging history in Nextcloud talk CVE-2023-30540 3.5 LowApril 17, 2023
• nextcloud talk, kiteworks security-advisories +1 more Chat room membership disclosed via autocompletion in Nextcloud talk CVE-2023-28845 3.5 LowMarch 31, 2023
• nextcloud talk, kiteworks security-advisories +1 more Nextcloud Talk messages can still be seen on conversation after expiring when cron is misconfigured CVE-2023-26041 2.6 LowFebruary 27, 2023
• nextcloud talk, kiteworks security-advisories +1 more Passcode bypass on Talk-Android app CVE-2023-22473 2.1 LowJanuary 9, 2023
• nextcloud talk, kiteworks security-advisories +1 more Nextcloud Talk guests can continue to receive video streams from call after being removed from a conversation CVE-2022-41971 4.8 MediumDecember 1, 2022
• nextcloud talk, kiteworks security-advisories +1 more Nextcloud Talk Android broadcast incorrect permission handling CVE-2022-41926 3.3 LowNovember 25, 2022
• nextcloud talk, kiteworks security-advisories +1 more Last video frame is still sent after video is disabled in a call in Nextcloud Talk CVE-2022-39212 4.3 MediumSeptember 16, 2022
• nextcloud talk, kiteworks security-advisories +1 more Missing rate limit when trying to join a password protected Nextcloud Talk conversation CVE-2022-35932 3.5 LowAugust 12, 2022
• nextcloud talk, kiteworks security-advisories +1 more Exposure of Private Personal Information to an Unauthorized Actor in Nextcloud Talk CVE-2022-24890 2.4 LowMay 17, 2022
• nextcloud talk, kiteworks security-advisories +1 more Open Redirect in Nextcloud Talk CVE-2022-24887 4.3 MediumApril 27, 2022
• nextcloud talk, kiteworks security-advisories +1 more Nextcloud Talk app exposes chat messages on lockscreen CVE-2021-41181 2.4 LowMarch 8, 2022
• nextcloud talk, kiteworks security-advisories +1 more Geolocation preview links can be set to arbitrary links in nextcloud talk CVE-2021-41180 4.7 MediumMarch 8, 2022
• nextcloud talk, kiteworks security-advisories +1 more XSS in Talk CVE-2021-39222 6.4 MediumNovember 15, 2021
• nextcloud talk, kiteworks security-advisories +1 more Nextcloud Talk not properly disassociating users from chats after account deletion CVE-2021-32689 8.1 HighJuly 12, 2021
• nextcloud talk, kiteworks security-advisories +1 more Session Fixation in Nextcloud Talk CVE-2021-32676 6.5 MediumJune 16, 2021
• nextcloud talk A too lax check in Nextcloud Talk 6.0.4, 7.0.2 and 8.0.7 allowed a code injection when a not... CVE-2020-8180 9.9 CriticalJune 8, 2020
• nextcloud talk Improper access control in Nextcloud Talk 6.0.3 leaks the existance and the name of private... CVE-2019-15620 2.7 LowFebruary 4, 2020
• hackerone nextcloud server, nextcloud deck, server +1 more +3 more Improper neutralization of file names, conversation names and board names in Nextcloud Server 16... CVE-2019-15619 4.8 MediumFebruary 4, 2020
• nextcloud talk, nextcloud/talk +1 more A missing sanitization of search results for an autocomplete field in NextCloud Talk <3.2.5 could... CVE-2018-3781 5.4 MediumAugust 13, 2018