Login Request a demo
SE
Product
security-advisories
by nextcloud · last CVE Jun 1, 2026
191
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities191In the news0Timeline
Severity mix
Critical 7High 37Medium 128Low 19
Severity
All severities191Critical7High37Medium128Low19
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add security-advisories to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-22212
9.8
1%
Jan 18
Nextcloud global site selector authentication bypass
Affected: >= 1.1.0, < 1.4.1; >= 2.0.0, < 2.1.2; >= 2.2.0, < 2.3.4; >= 2.4.0, < 2.4.5
CVE-2023-49792
9.8
1%
Dec 22
Bruteforce protection can be bypassed with misconfigured proxy
Affected: >= 23.0.0, < 23.0.12.13; >= 24.0.0, < 24.0.12.9; >= 25.0.0, < 25.0.13.4; >= 26.0.0, < 26.0.9; >= 27.0.0, < 27.1.4
CVE-2023-48307
9.8
1%
Nov 21
Nextcloud Mail app vulnerable to Server-Side Request Forgery
Affected: >= 1.13.0, < 2.2.8; >= 3.1.0, < 3.3.0
CVE-2023-48306
9.8
1%
Nov 21
Nextcloud Server DNS pin middleware can be tricked into DNS rebinding allowing SSRF
Affected: >= 22.0.0, < 22.2.10.16; >= 23.0.0, < 23.0.12.11; >= 24.0.0, < 24.0.12.7; >= 25.0.0, < 25.0.11; >= 26.0.0, < 26.0.6; >= 27.0.0, < 27.1.0
CVE-2023-32074
9.8
1%
May 25
Nextcloud user_oidc app is missing brute force protection
Affected: < 1.3.2
CVE-2022-31132
9.8
1%
Aug 4
Unauthenticated SSRF in 3rd party module "cerdic/csstidy"
Affected: < 1.12.8; >= 1.13.0, < 1.13.6
CVE-2023-35172
9.1
1%
Jun 23
Nextcloud Server password reset endpoint is not brute force protected
Affected: Nextcloud Server >= 25.0.0, < 25.0.7; Nextcloud Server >= 26.0.0, < 26.0.2; Nextcloud Enterprise Server >= 25.0.0, < 25.0.7; Nextcloud Enterprise Server >= 26.0.0, < 26.0.2; Nextcloud Enterprise Server >= 21.0.0, < 21.0.9.12; Nextcloud Enterprise Server >= 22.0.0, < 22.2.10.12; +2 more
CVE-2026-45284
8.8
0%
Jun 1
Nextcloud: Wrong condition in the User OIDC app's LdapService allowed deleted LDAP users to authenticate
Affected: >= 1.3.6, < 8.4.0
CVE-2023-45151
8.8
1%
Oct 16
OAuth2 client_secret stored in plain text in the Nextcloud database
Affected: >= 25.0.0, < 25.0.8; >= 26.0.0, < 26.0.3; >= 27.0.0, < 27.0.1
CVE-2023-35928
8.8
1%
Jun 23
Nextcloud user scoped external storage can be used to gather credentials of other users
Affected: Nextcloud Enterprise Server >= 19.0.0, < 19.0.13.9; Nextcloud Enterprise Server >= 20.0.0.0, < 20.0.14.14; Nextcloud Enterprise Server >= 21.0.0.0, < 21.0.9.12; Nextcloud Enterprise Server >= 22.0.0.0, < 22.2.10.12; Nextcloud Enterprise Server >= 23.0.0.0, < 23.0.12.7; Nextcloud Enterprise Server >= 24.0.0.0, < 24.0.12.2; +4 more
CVE-2023-30539
8.8
1%
Apr 17
Users can set up workflows using restricted and invisible system tags in Nextcloud
Affected: Nextcloud Server: < 24.0.11; Nextcloud Server: >= 25.0.0, < 25.0.5; Nextcloud Files automated tagging: >= 1.11.0, < 1.11.1; Nextcloud Files automated tagging: >= 1.12.0, < 1.12.1; Nextcloud Files automated tagging: >= 1.13.0, < 1.13.1; Nextcloud Files automated tagging: >= 1.14.0, < 1.14.2; +2 more
CVE-2023-28833
8.8
1%
Mar 30
Unrestricted filenames for logo or favicon as admin in the theming settings in nextcloud server
Affected: < 24.0.10; >= 25.0.0, < 25.0.4
CVE-2023-28643
8.8
1%
Mar 30
Potential share collision for recipients when caching is enabled in nextcloud server
Affected: < 24.0.9; >= 25.0.0, < 25.0.3
CVE-2023-26482
8.8
4%
Mar 30
Scope of workflow operations is not validated in nextcloud server
Affected: < 24.0.10; >= 25.0.0, < 25.0.4
CVE-2023-22472
8.8
0%
Jan 9
Nextcloud Deck Desktop Client is vulnerable to Cross-Site Request Forgery (CSRF) via malicious link
Affected: <= 3.6.1
CVE-2026-45545
8.2
0%
Jun 1
Nextcloud: SQL Injection in Column Type Parameter Allows Arbitrary SQL Execution
Affected: >= 0.7.0, < 0.7.7; >= 0.8.0, < 0.8.10; >= 0.9.0, < 0.9.8; >= 1.0.0, < 1.0.4
CVE-2024-52519
8.2
1%
Nov 15
Nextcloud Server's OAuth2 client secrets were stored in a recoverable way
Affected: >= 28.0.0, < 28.0.10; >= 29.0.0, < 29.0.7
CVE-2026-45281
8.1
0%
Jun 1
Nextcloud: Cross-Account Calendar Takeover via Unauthorized Group-Member-Set Update
Affected: >= 32.0.0, < 32.0.9; >= 33.0.0, < 33.0.3
CVE-2026-45156
8.1
0%
Jun 1
Nextcloud: Authentication Bypass in ID4me handling via Missing JWT Signature Verification in User OIDC
Affected: >= 0.3.0, < 3.1.0; >= 5.0.0, < 5.1.0; >= 6.0.0, < 6.4.0
CVE-2024-52508
8.1
1%
Nov 15
Nextcloud Mail auto configurator can be tricked into sending account information to wrong servers
Affected: >= 1.9.0, < 1.14.6; >= 2.1.0, < 2.2.11; >= 3.1.0, < 3.6.3; >= 1.15.0, < 1.15.4; >= 3.7.0, < 3.7.7
CVE-2024-37882
8.1
1%
Jun 14
Nextcloud Server can reshare read&share only folder with more permissions
Affected: >= 26.0.0, < 26.0.13; >= 27.0.0, < 27.1.8; >= 28.0.0, < 28.0.4
CVE-2023-39954
8.1
0%
Aug 10
user_oidc app stores client secret unencrypted in database
Affected: >= 1.0.0, < 1.3.3
CVE-2023-35927
8.1
1%
Jun 23
Nextcloud system addressbooks can be modified by malicious trusted server
Affected: Nextcloud Server >= 25.0.0, < 25.0.7; Nextcloud Server >= 26.0.0, < 26.0.2; Nextcloud Enterprise Server >= 25.0.0, < 25.0.7; Nextcloud Enterprise Server >= 26.0.0, < 26.0.2; Nextcloud Enterprise Server >= 21.0.0, < 21.0.9.12; Nextcloud Enterprise Server >= 22.0.0, < 22.2.10.12; +2 more
CVE-2023-25817
8.1
1%
Mar 27
Delete permissions are not saved when creating public share in Nextcloud server
Affected: >= 24.0.0, < 24.0.9
CVE-2024-37885
7.8
0%
Jun 14
Code injection in Nextcloud Desktop Client for macOS
Affected: < 3.12.0
CVE-2023-39963
7.8
0%
Aug 10
Missing password confirmation when creating app passwords
Affected: >= 20.0.0, < 20.0.14.15; >= 21.0.0, < 21.0.9.13; >= 22.0.0, < 22.2.10.14; >= 23.0.0, < 23.0.12.9; >= 24.0.0, < 24.0.12.5; >= 25.0.0, < 25.0.9; +2 more
CVE-2023-39957
7.8
0%
Aug 10
Path traversal allows tricking the Talk Android app into writing files into it's root directory
Affected: < 17.0.0
CVE-2023-25820
7.8
0%
Mar 22
Nextcloud Server and Enterprise Server missing brute force protection on password confirmation modal
Affected: Nextcloud Server >= 24.0.0, < 24.0.10; Nextcloud Server >= 25.0.0, < 25.0.4; Nextcloud Enterprise Server >= 25.0.0, < 25.0.4; Nextcloud Enterprise Server >= 24.0.0, < 24.0.10; Nextcloud Enterprise Server >= 23.0.0, < 23.0.12.5; Nextcloud Enterprise Server >= 22.0.0, < 22.2.10.10; +1 more
CVE-2022-41882
7.8
0%
Nov 11
Nextcloud Desktop vulnerable to code injection via malicious link
Affected: = 3.6.0
CVE-2023-39962
7.7
1%
Aug 10
Users can delete external storage mount points
Affected: >= 19.0.0, < 19.0.13.10; >= 20.0.0, < 20.0.14.15; >= 21.0.0, < 21.0.9.13; >= 22.0.0, < 22.2.10.14; >= 23.0.0, < 23.0.12.9; >= 24.0.0, < 24.0.12.5; +3 more
CVE-2024-52510
7.5
1%
Nov 15
Nextcloud Desktop client behaves incorrectly if the initial end-to-end-encryption signature is empty
Affected: >= 3.0.0, < 3.14.2
CVE-2024-52525
7.5
0%
Nov 15
Nextcloud Server User password is available in memory of the PHP process
Affected: >= 28.0.0, < 28.0.12; >= 29.0.0, < 29.0.9; >= 30.0.0, < 30.0.2
CVE-2024-37313
7.5
0%
Jun 14
Nextcloud server allows the by-pass the second factor
Affected: >= 26.0.0, < 26.0.13; >= 27.0.0, < 27.1.8; >= 28.0.0, < 28.0.4
CVE-2023-39960
7.5
1%
Oct 13
Nextcloud Server has improper restriction of excessive authentication attempts on WebDAV endpoint
Affected: >= 22.0.0, < 22.2.10.14; >= 23.0.0, < 23.0.12.9; >= 24.0.0, < 24.0.12.5; >= 25.0.0, < 25.0.9; >= 26.0.0, < 26.0.4
CVE-2023-32320
7.5
1%
Jun 22
Nextcloud Server's brute force protection allows someone to send more requests than intended
Affected: Nextcloud Server >= 25.0.0, < 25.0.7; Nextcloud Server >= 26.0.0, < 26.0.2; Nextcloud Enterprise Server >= 21.0.0, < 21.0.9.12; Nextcloud Enterprise Server >= 22.0.0, < 22.2.10.12; Nextcloud Enterprise Server >= 23.0.0, < 23.0.12.7; Nextcloud Enterprise Server >= 24.0.0, < 24.0.12.2; +2 more
CVE-2023-28847
7.5
1%
Apr 25
Nextcloud Server missing brute force protection for passwords of password protected share links
Affected: >= 23.0.0, < 23.0.12.6; >= 24.0.0, < 24.0.11; >= 25.0.0, < 25.0.5
CVE-2023-28835
7.5
1%
Mar 30
Insecure randomness for default password in nextcloud
Affected: < 24.0.10; >= 25.0.0, < 25.0.4
CVE-2023-28644
7.5
1%
Mar 30
Reference fetch can saturate the server bandwidth for 10 seconds in nextcloud server
Affected: >= 25.0.0, < 25.0.3
CVE-2023-25821
7.5
1%
Feb 24
Nextcloud download permissions can be changed by resharer
Affected: >= 24.0.4, < 24.0.7; >= 25.0.0, < 25.0.1
CVE-2023-25579
7.5
1%
Feb 22
Directory traversal in Nextcloud server
Affected: < 23.0.12; >= 24.0.0, < 24.0.8; >= 25.0.0, < 25.0.2
CVE-2022-36074
7.5
1%
Sep 15
Authentication headers exposed on by Nextcloud Server
Affected: < 23.0.7; >= 24.0.0, < 24.0.3
CVE-2026-45722
7.1
0%
Jun 1
Nextcloud: Tables app allows limited SQLi in ORDER BY with malicious sort order argument for Table Views
Affected: >= 0.9.0, < 0.9.7; >= 1.0.0, < 1.0.2
CVE-2023-48239
7.1
1%
Nov 21
Nextcloud Server users can make external storage mount points inaccessible for other users
Affected: >= 25.0.0, < 25.0.13; >= 26.0.0, < 26.0.8; >= 27.0.0, < 27.1.3; >= 20.0.0, < 20.0.14.16; >= 21.0.0, < 21.0.9.13; >= 22.0.0, < 22.2.10.15; +2 more
CVE-2023-25818
7.1
1%
Mar 27
Missing brute force protection on password reset token in Nextcloud Server
Affected: >= 24.0.0, < 24.0.10; >= 25.0.0, < 25.0.4
CVE-2026-45810
6.8
0%
Jun 1
Nextcloud: Propfind requests for file comments allowed to load comments for other files
Affected: >= 31.0.0, < 31.0.12; >= 32.0.0, < 32.0.3
CVE-2023-28647
6.8
0%
Mar 30
App pin of the iOS app can be bypassed in Nextcloud iOS
Affected: < 4.7.0
CVE-2023-32318
6.7
0%
May 26
User session not correctly destroyed on logout
Affected: >= 25.0.2, < 25.0.6; >= 26.0.0, < 26.0.1
CVE-2026-45282
6.5
0%
Jun 1
Nextcloud: Logged-in user bypasses share password and download restrictions on Text attachments via documentId leads to unauthorized file access
Affected: >= 32.0.0, < 32.0.9; >= 33.0.0, < 33.0.3
CVE-2026-45279
6.5
0%
Jun 1
Nextcloud: Limited path traversal via template API if using `{lang}` in config
Affected: >= 31.0.0, < 31.0.14; >= 32.0.0, < 32.0.4
CVE-2026-45275
6.5
0%
Jun 1
Nextcloud: Authorization bypass in approval feature allows unauthorized file sharing with approvers
Affected: < 2.7.2
Page 1 of 4 · 191 total
12…4