Nextcloud vulnerabilities
306 CVEs and advisories name Nextcloud as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-45281Nextcloud: Cross-Account Calendar Takeover via Unauthorized Group-Member-Set Update
- CVE-2026-45279Nextcloud: Limited path traversal via template API if using `{lang}` in config
- CVE-2026-45278Nextcloud: Open Redirect in user_oidc login flow via protocol-relative URL bypass
- CVE-2026-45277Nextcloud: Information disclosure in Nextcloud Approval app via fileId parameter reveals workflow associations
- CVE-2026-45275Nextcloud: Authorization bypass in approval feature allows unauthorized file sharing with approvers
- CVE-2026-45267Nextcloud: Missing permission check for from submissions
- CVE-2026-45266Nextcloud: Unauthorized force-mute from missing permission check when using internal signaling
- CVE-2026-45159Nextcloud: Files drop share links for end-to-end encrypted folders allowed to drop files into other folders of the share owner
- CVE-2026-45157Nextcloud: Valid share tokens allow to access tempory upload files of share owner
- CVE-2026-45156Nextcloud: Authentication Bypass in ID4me handling via Missing JWT Signature Verification in User OIDC
- CVE-2026-45155Nextcloud: Private circle can be added to another circle via API
- CVE-2026-45154Nextcloud: Improper Access Control in Collectives
- CVE-2026-45153Nextcloud: PIN bypass in PassCodeActivity via back button
- CVE-2026-45264Nextcloud: ACL Rename Permission Bypass in Team Folders Allows Unauthorized File Renames
- CVE-2026-44515Nextcloud News: Authenticated blind SSRF via feed URL
- CVE-2025-66558Nextcloud Twofactor WebAuthn app was updated based on public key
- CVE-2025-66556Nextcloud talk allows participants to blindly delete poll drafts of other users by ID
- CVE-2025-66554Nextcloud Contacts vulnerable to Stored XSS in contacts app via organisation and title field
- CVE-2025-66549Nextcloud Desktop discloses information when attempting to lock a file inside a end-to-end encrypted directory
- CVE-2025-66545Nextcloud Groupfolders users with read-only permissions for team folder can restore deleted files from trash bin
- CVE-2025-66515Nextcloud Approval app allows users to request approval for other users file
- CVE-2025-66514Nextcloud Mail stored HTML injection in subject text
- CVE-2025-66557Nextcloud Deck app allowed user with "Can share" permission to modify permissions of other non-owners
- CVE-2025-66548Nextcloud Deck app allows to spoof file extensions by using RTLO characters
- CVE-2025-66553Nextcloud Tables app allowed users to view columns metadata information of any table
- CVE-2025-66551Nextcloud Tables is missing an ownership check which allows moving columns into tables of other users
- CVE-2025-66513Nextcloud Tables app share information not limited to relevant users
- CVE-2025-66550Nextcloud Calendar attachments of local files are offered to downloaded
- CVE-2025-66546Nextcloud Calendar app allowed booking appointments without the generated token
- CVE-2025-66511Nextcloud Calendar app used predictable proposal participant tokens