CVEs we hold for Nextcloud
Records whose assigning authority named Nextcloud as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-45810Nextcloud: Propfind requests for file comments allowed to load comments for other filesnextcloud security-advisories
CVE-2026-45722Nextcloud: Tables app allows limited SQLi in ORDER BY with malicious sort order argument for Table Viewsnextcloud security-advisories
CVE-2026-45691Nextcloud: Bypass of second factor authentication on DAV endpointsnextcloud security-advisories
CVE-2026-45690Nextcloud: Two-Factor Authentication Bypass via Pending Session Token Replaynextcloud security-advisories
CVE-2026-45545Nextcloud: SQL Injection in Column Type Parameter Allows Arbitrary SQL Executionnextcloud security-advisories
CVE-2026-45544Nextcloud: Information Disclosure of view filter metdata via Broken Sensitive Data Masking in ViewServicenextcloud security-advisories
CVE-2026-45543Nextcloud: Deleting a Forms collaborator share leaves uploaded response files accessible through a lingering Files sharenextcloud security-advisories
CVE-2026-45286Nextcloud: Calendar app leaked user identifiers via attendee suggestion endpointnextcloud security-advisories
CVE-2026-45285Nextcloud: Hidden Public Link creation when sharing to a Team External Membernextcloud security-advisories
CVE-2026-45284Nextcloud: Wrong condition in the User OIDC app's LdapService allowed deleted LDAP users to authenticatenextcloud security-advisories
CVE-2026-45283Nextcloud: Files Lock app allows users to lock and unlock files of other usersnextcloud security-advisories
CVE-2026-45282Nextcloud: Logged-in user bypasses share password and download restrictions on Text attachments via documentId leads to…nextcloud security-advisories
CVE-2026-45281Nextcloud: Cross-Account Calendar Takeover via Unauthorized Group-Member-Set Updatenextcloud security-advisories
CVE-2026-45279Nextcloud: Limited path traversal via template API if using `{lang}` in confignextcloud security-advisories
CVE-2026-45278Nextcloud: Open Redirect in user_oidc login flow via protocol-relative URL bypassnextcloud security-advisories
CVE-2026-45277Nextcloud: Information disclosure in Nextcloud Approval app via fileId parameter reveals workflow associationsnextcloud security-advisories
CVE-2026-45275Nextcloud: Authorization bypass in approval feature allows unauthorized file sharing with approversnextcloud security-advisories
CVE-2026-45266Nextcloud: Unauthorized force-mute from missing permission check when using internal signalingnextcloud security-advisories
CVE-2026-45264Nextcloud: ACL Rename Permission Bypass in Team Folders Allows Unauthorized File Renamesnextcloud security-advisories
CVE-2026-45159Nextcloud: Files drop share links for end-to-end encrypted folders allowed to drop files into other folders of the…nextcloud security-advisories
CVE-2026-45157Nextcloud: Valid share tokens allow to access tempory upload files of share ownernextcloud security-advisories
CVE-2026-45156Nextcloud: Authentication Bypass in ID4me handling via Missing JWT Signature Verification in User OIDCnextcloud security-advisories
CVE-2026-45155Nextcloud: Private circle can be added to another circle via APInextcloud security-advisories
CVE-2026-45153Nextcloud: PIN bypass in PassCodeActivity via back buttonnextcloud security-advisories
CVE-2025-66558Nextcloud Twofactor WebAuthn app was updated based on public keynextcloud security-advisories
CVE-2025-66557Nextcloud Deck app allowed user with "Can share" permission to modify permissions of other non-ownersnextcloud security-advisories
CVE-2025-66556Nextcloud talk allows participants to blindly delete poll drafts of other users by IDnextcloud security-advisories
CVE-2025-66554Nextcloud Contacts vulnerable to Stored XSS in contacts app via organisation and title fieldnextcloud security-advisories
CVE-2025-66553Nextcloud Tables app allowed users to view columns metadata information of any tablenextcloud security-advisories
CVE-2025-66552Nextcloud Server admin_audit does not log all actions on files in groupfoldersnextcloud security-advisories
CVE-2025-66551Nextcloud Tables is missing an ownership check which allows moving columns into tables of other usersnextcloud security-advisories
CVE-2025-66550Nextcloud Calendar attachments of local files are offered to downloadednextcloud security-advisories
CVE-2025-66549Nextcloud Desktop discloses information when attempting to lock a file inside a end-to-end encrypted directorynextcloud security-advisories
CVE-2025-66548Nextcloud Deck app allows to spoof file extensions by using RTLO charactersnextcloud security-advisories
CVE-2025-66547Nextcloud Server users can modify tags on files that do not belong to themnextcloud security-advisories
CVE-2025-66546Nextcloud Calendar app allowed booking appointments without the generated tokennextcloud security-advisories
CVE-2025-66545Nextcloud Groupfolders users with read-only permissions for team folder can restore deleted files from trash binnextcloud security-advisories
CVE-2025-66515Nextcloud Approval app allows users to request approval for other users filenextcloud security-advisories
CVE-2025-66513Nextcloud Tables app share information not limited to relevant usersnextcloud security-advisories
CVE-2025-66512Nextcloud Server vulnerable to XSS in SVG images when opened outside of Nextcloudnextcloud security-advisories
CVE-2025-66511Nextcloud Calendar app used predictable proposal participant tokensnextcloud security-advisories
CVE-2025-66510Nextcloud Server Contacts Search allowed users to retrieve contact information of other users beyond their contact listnextcloud security-advisories
CVE-2025-58051Nextcloud Tables app allowed to include local file via PhpSpreadsheet when importing a tablenextcloud security-advisories
CVE-2025-47794Nextcloud Server vulnerable to insecure temporary file creation, race with write access and permissionnextcloud security-advisories
CVE-2025-47793Nextcloud Server and Groupfolders app vulnerable to bypass of group folder quota limit using attachment in text filenextcloud security-advisories
CVE-2025-47792Nextcloud Desktop 3rdparty applications can create share links via socket APInextcloud security-advisories
CVE-2025-47791Nextcloud Server's test remote endpoint is not rate limitednextcloud security-advisories
CVE-2025-47790Nextcloud Server doesn't request second factor after session timeoutnextcloud security-advisories
CVE-2024-52525Nextcloud Server User password is available in memory of the PHP processnextcloud security-advisories
CVE-2024-52523Nextcloud Server Custom defined credentials of external storages are sent back to the frontendnextcloud security-advisories
CVE-2024-52521Nextcloud Server has a potential hash collision for background jobs could skip queuing themnextcloud security-advisories
CVE-2024-52520Nextcloud Server's link reference provider can be tricked into downloading bigger files than intendednextcloud security-advisories
CVE-2024-52519Nextcloud Server's OAuth2 client secrets were stored in a recoverable waynextcloud security-advisories
CVE-2024-52518Nextcloud Server is missing password confirmation when changing external storage optionsnextcloud security-advisories
CVE-2024-52517Nextcloud Server's global credentials of external storages are sent back to the frontendnextcloud security-advisories
CVE-2024-52516Nextcloud Server's shares are not removed when user is limited to share with in their groups and being removed from one…nextcloud security-advisories
CVE-2024-52515Nextcloud Server has incomplete sanitization of SVG files allows to embed other images into previewsnextcloud security-advisories
CVE-2024-52514Nextcloud Server allows users to copy folder that contain files that are blocked by the files access controlnextcloud security-advisories
CVE-2024-52513Nextcloud Server's Attachments folder for Text app is accessible on "Files drop" and "Password protected" sharesnextcloud security-advisories
CVE-2024-52512Nextcloud User OIDC has an open redirection when logging in with User OIDCnextcloud security-advisories
CVE-2024-52511Nextcloud Tables has an Authorization Bypass Through User-Controlled Key in Tablesnextcloud security-advisories
CVE-2024-52510Nextcloud Desktop client behaves incorrectly if the initial end-to-end-encryption signature is emptynextcloud security-advisories
CVE-2024-52509Nextcloud Mail app does not respect download permissions in sharesnextcloud security-advisories
CVE-2024-52508Nextcloud Mail auto configurator can be tricked into sending account information to wrong serversnextcloud security-advisories
CVE-2024-52507Share information of the Nextcloud Tables app is not limited to affected usersnextcloud security-advisories
CVE-2024-37887Nextcloud Server's events information leaked with shared calendars on recurrence exceptionsnextcloud security-advisories
CVE-2024-37886Nextcloud user_oidc's ID4me does not validate signature or expirationnextcloud security-advisories
CVE-2024-37884Nextcloud Server's users can delete old versions of read-only shared filesnextcloud security-advisories
CVE-2024-37883Nextcloud Deck can access comments and attachments of deleted cardsnextcloud security-advisories
CVE-2024-37882Nextcloud Server can reshare read&share only folder with more permissionsnextcloud security-advisories
CVE-2024-37317Nextcloud Notes app can be tricked into using a received share created before the user logged innextcloud security-advisories
CVE-2024-37316Nextcloud Calendar's event create can create attachments that link to other websitesnextcloud security-advisories
CVE-2024-37315Nextcloud Server's read-only users can restore old versionsnextcloud security-advisories
CVE-2024-37314Nextcloud Photos' shared albums have no restriction on photo removalnextcloud security-advisories
CVE-2024-37312Nextcloud user_oidc app's ID4me feature is available even when disablednextcloud security-advisories
CVE-2024-22403OAuth2 authorization codes are valid indefinetly in Nextcloud servernextcloud security-advisories
CVE-2024-22402Improper handling of request URLs in Nextcloud Guests app allows guest users to bypass app allowlistnextcloud security-advisories
CVE-2024-22401All users can reset the allowed apps list for Nextcloud Guest App usersnextcloud security-advisories
CVE-2024-22400Open redirect in user_saml via RelayState parameter in Nextcloud User Samlnextcloud security-advisories
CVE-2024-22213Cross-site Scripting when sending HTML as a comment in the Nextcloud Deck appnextcloud security-advisories
CVE-2023-49792Bruteforce protection can be bypassed with misconfigured proxynextcloud security-advisories
CVE-2023-49791Workflows do not require password confirmation on API levelnextcloud security-advisories
CVE-2023-48308Calendar app returns full stacktrace when an error happens while editing appointmentnextcloud security-advisories
CVE-2023-48307Nextcloud Mail app vulnerable to Server-Side Request Forgerynextcloud security-advisories
CVE-2023-48306Nextcloud Server DNS pin middleware can be tricked into DNS rebinding allowing SSRFnextcloud security-advisories
CVE-2023-48305Nextcloud Server user_ldap app logs user passwords in the log file on level debugnextcloud security-advisories
CVE-2023-48304Nextcloud Server vulnerable to attacker enabling/disabling birthday calendar for any usernextcloud security-advisories
CVE-2023-48303Nextcloud Server admins can change authentication details of user configured external storagenextcloud security-advisories
CVE-2023-48302Nextcloud Server vulnerable to Self XSS when pasting HTML into Text app with Ctrl+Shift+Vnextcloud security-advisories
CVE-2023-48301Nextcloud Server HTML injection in search UI when selecting a circle with HTML in the display namenextcloud security-advisories
CVE-2023-48239Nextcloud Server users can make external storage mount points inaccessible for other usersnextcloud security-advisories
CVE-2023-45660Require strict cookies for image proxy requests in Nextcloud Mailnextcloud security-advisories
CVE-2023-45151OAuth2 client_secret stored in plain text in the Nextcloud databasenextcloud security-advisories
CVE-2023-45150Inviting excessive long email addresses to a calendar event makes the Nextcloud server unresponsivenextcloud security-advisories
CVE-2023-45149Password of talk conversations can be bruteforced in Nextcloudnextcloud security-advisories
CVE-2023-45148Rate limiter not working reliable when Memcached is installed in Nextcloudnextcloud security-advisories
CVE-2023-39963Missing password confirmation when creating app passwordsnextcloud security-advisories
CVE-2023-39960Nextcloud Server has improper restriction of excessive authentication attempts on WebDAV endpointnextcloud security-advisories
CVE-2023-39959Existence of calendars and address books can be checked by unauthenticated usersnextcloud security-advisories
CVE-2023-39958Missing brute force protection on password reset token OAuth2 API controllernextcloud security-advisories
CVE-2023-39957Path traversal allows tricking the Talk Android app into writing files into it's root directorynextcloud security-advisories
CVE-2023-39954user_oidc app stores client secret unencrypted in databasenextcloud security-advisories
CVE-2023-39952Advanced permissions not respected when copying entire group foldersnextcloud security-advisories
CVE-2023-35928Nextcloud user scoped external storage can be used to gather credentials of other usersnextcloud security-advisories
CVE-2023-35927Nextcloud system addressbooks can be modified by malicious trusted servernextcloud security-advisories
CVE-2023-35172Nextcloud Server password reset endpoint is not brute force protectednextcloud security-advisories
CVE-2023-35171Nextcloud Server vulnerable to open redirect on "Unsupported browser" warningnextcloud security-advisories
CVE-2023-33183Error in calendar when booking an appointment reveals the full path of the websitenextcloud security-advisories
CVE-2023-33182Nextcloud Contacts photos only sanitized if mime type is all lower casenextcloud security-advisories
CVE-2023-32320Nextcloud Server's brute force protection allows someone to send more requests than intendednextcloud security-advisories
CVE-2023-32319Basic auth header on WebDAV requests is not brute-force protected in Nextcloudnextcloud security-advisories
CVE-2023-32074Nextcloud user_oidc app is missing brute force protectionnextcloud security-advisories
CVE-2023-31128NextCloud Cookbook's pull-checks.yml workflow is vulnerable to OS Command Injectionnextcloud cookbook
CVE-2023-30540Chat poll data can still be queried from API after purging history in Nextcloud talknextcloud security-advisories
CVE-2023-30539Users can set up workflows using restricted and invisible system tags in Nextcloudnextcloud security-advisories
CVE-2023-29000Nextcloud Desktop client does not verify received singed certificate in end-to-end encryptionnextcloud security-advisories
CVE-2023-28999Nextcloud: Lack of authenticity of metadata keys allows a malicious server to gain access to E2EE foldersnextcloud security-advisories
CVE-2023-28998Nextcloud Desktop client misbehaves with E2EE when the server returns empty list of metadata keysnextcloud security-advisories
CVE-2023-28997Nextcloud Desktop: Initialization vector reuse in E2EE allows malicious server admin to break, manipulate, access filesnextcloud security-advisories
CVE-2023-28848CSRF protection on user_oidc login returned the expected token in case of an errornextcloud security-advisories
CVE-2023-28847Nextcloud Server missing brute force protection for passwords of password protected share linksnextcloud security-advisories
CVE-2023-28845Chat room membership disclosed via autocompletion in Nextcloud talknextcloud security-advisories
CVE-2023-28844User without download rights can download older version of that file in nextcloud servernextcloud security-advisories
CVE-2023-28834Full path of data directory exposed to Nextcloud server usersnextcloud security-advisories
CVE-2023-28833Unrestricted filenames for logo or favicon as admin in the theming settings in nextcloud servernextcloud security-advisories
CVE-2023-28646App lockout in nextcloud Android app can be bypassed via thirdparty appsnextcloud security-advisories
CVE-2023-28645Secure view can be bypassed by using internal API endpoint in Nextcloud richdocumentsnextcloud security-advisories
CVE-2023-28644Reference fetch can saturate the server bandwidth for 10 seconds in nextcloud servernextcloud security-advisories
CVE-2023-28643Potential share collision for recipients when caching is enabled in nextcloud servernextcloud security-advisories
CVE-2023-26482Scope of workflow operations is not validated in nextcloud servernextcloud security-advisories
CVE-2023-26041Nextcloud Talk messages can still be seen on conversation after expiring when cron is misconfigurednextcloud security-advisories
CVE-2023-25821Nextcloud download permissions can be changed by resharernextcloud security-advisories
CVE-2023-25820Nextcloud Server and Enterprise Server missing brute force protection on password confirmation modalnextcloud security-advisories
CVE-2023-25818Missing brute force protection on password reset token in Nextcloud Servernextcloud security-advisories
CVE-2023-25817Delete permissions are not saved when creating public share in Nextcloud servernextcloud security-advisories
CVE-2023-25816nextcloud vulnerable to Uncontrolled Resource Consumptionnextcloud security-advisories
CVE-2023-25162Nextcloud Server vulnerable to SSRF via filter bypass due to lax checking on IPsnextcloud security-advisories
CVE-2023-25161Nextcloud Server's missing rate limiting on password reset functionality allows sending lots of emailsnextcloud security-advisories
CVE-2023-25159Nextcloud Server previews are accessible without a watermarknextcloud security-advisories
CVE-2023-25150Document content of files can be obtained through Collabora for files of other usersnextcloud security-advisories
CVE-2023-23944Nexcloud Mail app temporarily stores cleartext password in databasenextcloud security-advisories
CVE-2023-23943Blind SSRF via server URL input in the Nextcloud Mail appnextcloud security-advisories
CVE-2023-22472Nextcloud Deck Desktop Client is vulnerable to Cross-Site Request Forgery (CSRF) via malicious linknextcloud security-advisories
CVE-2023-22470Nextcloud Deck vulnerable to uncontrolled resource consumptionnextcloud security-advisories
CVE-2023-22469Nextcloud Deck card vulnerable to data leak to unauthorized users via reference preview cachenextcloud security-advisories
CVE-2022-41971Nextcloud Talk guests can continue to receive video streams from call after being removed from a conversationnextcloud security-advisories
CVE-2022-41970Nextcloud Server's disabled download shares still allow download through preview imagesnextcloud security-advisories
CVE-2022-41969Nextcloud Server has no password length limit when creating a user as an administratornextcloud security-advisories
CVE-2022-41968Nextcloud Server's calendar name length not validated before writing to databasenextcloud security-advisories
CVE-2022-41926Nextcloud Talk Android broadcast incorrect permission handlingnextcloud security-advisories
CVE-2022-41882Nextcloud Desktop vulnerable to code injection via malicious linknextcloud security-advisories
CVE-2022-39364Exception logging in Sharepoint app reveals clear-text connection detailsnextcloud security-advisories
CVE-2022-39346Missing length validation of user displayname in nextcloud servernextcloud security-advisories
CVE-2022-39339Cleartext Transmission of Sensitive Information in user_oidcnextcloud security-advisories
CVE-2022-39338Stored cross site scripting (XSS) vulnerability via Authorization Endpoint in user_oidcnextcloud security-advisories
CVE-2022-39330Database resource exhaustion for logged-in users via sharee recommendations with circlesnextcloud security-advisories
CVE-2022-39212Last video frame is still sent after video is disabled in a call in Nextcloud Talknextcloud security-advisories
CVE-2022-39211Server-Side Request Forgery (SSRF) via potential filter bypass in Nextcloud Servernextcloud security-advisories
CVE-2022-35932Missing rate limit when trying to join a password protected Nextcloud Talk conversationnextcloud security-advisories
CVE-2022-35931Nextcloud Password Policy's generated passwords are not fully validated by HIBPValidatornextcloud security-advisories
200 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.