SE
Product
security-advisories
134
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 22Medium 91Low 14
Watch
Add security-advisories to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-45810 | 6.8 | Jun 1 | Nextcloud: Propfind requests for file comments allowed to load comments for other files Affected: >= 31.0.0, < 31.0.12; >= 32.0.0, < 32.0.3 |
| CVE-2023-32318 | 6.7 | May 26 | User session not correctly destroyed on logout Affected: >= 25.0.2, < 25.0.6; >= 26.0.0, < 26.0.1 |
| CVE-2026-45282 | 6.5 | Jun 1 | Nextcloud: Logged-in user bypasses share password and download restrictions on Text attachments via documentId leads to unauthorized file access Affected: >= 32.0.0, < 32.0.9; >= 33.0.0, < 33.0.3 |
| CVE-2026-45279 | 6.5 | Jun 1 | Nextcloud: Limited path traversal via template API if using `{lang}` in config Affected: >= 31.0.0, < 31.0.14; >= 32.0.0, < 32.0.4 |
| CVE-2026-45275 | 6.5 | Jun 1 | Nextcloud: Authorization bypass in approval feature allows unauthorized file sharing with approvers Affected: < 2.7.2 |
| CVE-2026-45267 | 6.5 | Jun 1 | Nextcloud: Missing permission check for from submissions Affected: < 5.2.6 |
| CVE-2025-66511 | 6.5 | Dec 5 | Nextcloud Calendar app used predictable proposal participant tokens Affected: >= 6.0.0-rc.1, < 6.0.3 |
| CVE-2025-58051 | 6.5 | Oct 16 | Nextcloud Tables app allowed to include local file via PhpSpreadsheet when importing a table Affected: >= 0.7.0, < 0.7.6; >= 0.8.0, < 0.8.8; >= 0.9.0, < 0.9.5 |
| CVE-2025-47793 | 6.5 | May 16 | Nextcloud Server and Groupfolders app vulnerable to bypass of group folder quota limit using attachment in text file Affected: >= 30.0.0, < 30.0.2; >= 29.0.0, < 29.0.9; >= 28.0.0, < 28.0.12; >= 18.0.0, < 18.0.3; >= 17.0.0, < 17.0.5; >= 16.0.0, < 16.0.11 |
| CVE-2024-52511 | 6.5 | Nov 15 | Nextcloud Tables has an Authorization Bypass Through User-Controlled Key in Tables Affected: >= 0.6.0, < 0.8.0 |
| CVE-2024-52515 | 6.5 | Nov 15 | Nextcloud Server has incomplete sanitization of SVG files allows to embed other images into previews Affected: >= 29.0.0, < 29.0.1; >= 28.0.0, < 28.0.6; >= 27.0.0, < 27.1.10 |
| CVE-2024-52520 | 6.5 | Nov 15 | Nextcloud Server's link reference provider can be tricked into downloading bigger files than intended Affected: >= 28.0.0, < 28.0.10; >= 29.0.0, < 29.0.7 |
| CVE-2024-52523 | 6.5 | Nov 15 | Nextcloud Server Custom defined credentials of external storages are sent back to the frontend Affected: >= 28.0.0, < 28.0.12; >= 29.0.0, < 29.0.9; >= 30.0.0, < 30.0.2 |
| CVE-2023-48308 | 6.5 | Dec 21 | Calendar app returns full stacktrace when an error happens while editing appointment Affected: >= 3.0.0, < 4.5.3 |
| CVE-2023-39952 | 6.5 | Aug 10 | Advanced permissions not respected when copying entire group folders Affected: >= 22.0.0, < 22.2.10.13; >= 23.0.0, < 23.0.12.8; >= 24.0.0, < 24.0.12.4; >= 25.0.0, < 25.0.8; >= 26.0.0, < 26.0.3; >= 27.0.0, < 27.0.1 |
| CVE-2023-35173 | 6.5 | Jun 23 | End-to-End encrypted file-drops can be made inaccessible Affected: >= 1.12.0, < 1.12.4 |
| CVE-2023-32319 | 6.5 | May 26 | Basic auth header on WebDAV requests is not brute-force protected in Nextcloud Affected: >= 24.0.0, < 24.0.11; >= 25.0.0, < 25.0.5 |
| CVE-2022-39364 | 6.5 | Oct 27 | Exception logging in Sharepoint app reveals clear-text connection details Affected: < 22.2.10.5; >= 23.0.0, < 23.0.9; >= 24.0.0, < 24.0.5 |
| CVE-2026-45285 | 6.4 | Jun 1 | Nextcloud: Hidden Public Link creation when sharing to a Team External Member Affected: >= 32.0.0, < 32.0.9; >= 33.0.0, < 33.0.3 |
| CVE-2025-47790 | 6.4 | May 16 | Nextcloud Server doesn't request second factor after session timeout Affected: >= 26.0.0, < 26.0.13.15; >= 27.0.0, < 27.1.11.15; >= 28.0.0, < 28.0.14.6; >= 29.0.0, < 29.0.15; >= 30.0.0, < 30.0.9; >= 31.0.0, < 31.0.3 |
| CVE-2026-45157 | 6.3 | Jun 1 | Nextcloud: Valid share tokens allow to access tempory upload files of share owner Affected: >= 32.0.0, < 32.0.9; >= 33.0.0, < 33.0.3 |
| CVE-2024-37312 | 6.3 | Jun 14 | Nextcloud user_oidc app's ID4me feature is available even when disabled Affected: <= 1.3.6 |
| CVE-2026-45278 | 6.1 | Jun 1 | Nextcloud: Open Redirect in user_oidc login flow via protocol-relative URL bypass Affected: >= 6.1.0, < 8.2.2 |
| CVE-2025-66512 | 6.1 | Dec 5 | Nextcloud Server vulnerable to XSS in SVG images when opened outside of Nextcloud Affected: >= 32.0.0beta1, < 32.0.3; < 31.0.12 |
| CVE-2025-47792 | 6.1 | May 16 | Nextcloud Desktop 3rdparty applications can create share links via socket API Affected: < 3.15 |
| CVE-2024-52512 | 6.1 | Nov 15 | Nextcloud User OIDC has an open redirection when logging in with User OIDC Affected: >= 6.0.0, < 6.1.0 |
| CVE-2024-22400 | 6.1 | Jan 18 | Open redirect in user_saml via RelayState parameter in Nextcloud User Saml Affected: >= 5.0.0, < 5.1.5; >= 5.2.0, < 5.2.5; >= 6.0.0, < 6.0.1 |
| CVE-2023-39955 | 6.1 | Aug 10 | Notes attachment render HTML in preview mode Affected: >= 4.4.0, < 4.8.0 |
| CVE-2023-35171 | 6.1 | Jun 23 | Nextcloud Server vulnerable to open redirect on "Unsupported browser" warning Affected: >= 26.0.0, < 26.0.2 |
| CVE-2026-45691 | 5.9 | Jun 1 | Nextcloud: Bypass of second factor authentication on DAV endpoints Affected: >= 32.0.0, < 32.0.9; >= 33.0.0, < 33.0.3 |
| CVE-2026-45690 | 5.9 | Jun 1 | Nextcloud: Two-Factor Authentication Bypass via Pending Session Token Replay Affected: >= 32.0.0, < 32.0.9; >= 33.0.0, < 33.0.3 |
| CVE-2024-52517 | 5.9 | Nov 15 | Nextcloud Server's global credentials of external storages are sent back to the frontend Affected: >= 28.0.0, < 28.0.11; >= 29.0.0, < 29.0.8; >= 30.0.0, < 30.0.1 |
| CVE-2025-66550 | 5.7 | Dec 5 | Nextcloud Calendar attachments of local files are offered to downloaded Affected: >= 5.0.0-rc.1, < 5.2.4; < 4.7.17 |
| CVE-2024-52509 | 5.7 | Nov 15 | Nextcloud Mail app does not respect download permissions in shares Affected: >=2.2.0, < 2.2.10; >= 3.6.0, < 3.6.2; >= 3.7.0, < 3.7.2 |
| CVE-2025-66548 | 5.5 | Dec 5 | Nextcloud Deck app allows to spoof file extensions by using RTLO characters Affected: >= 1.15.0-beta.1, < 1.15.1; >= 1.14.0-beta.1, < 1.14.4; < 1.12.7 |
| CVE-2025-66554 | 5.4 | Dec 5 | Nextcloud Contacts vulnerable to Stored XSS in contacts app via organisation and title field Affected: >= 7.0.0-alpha.1, < 7.2.5; >= 6.0.0-alpha1, < 6.0.6; < 5.5.4 |
| CVE-2025-66514 | 5.4 | Dec 5 | Nextcloud Mail stored HTML injection in subject text Affected: >= 5.2.0-beta.1, < 5.5.3 |
| CVE-2024-52518 | 5.4 | Nov 15 | Nextcloud Server is missing password confirmation when changing external storage options Affected: >= 28.0.0, < 28.0.12; >= 29.0.0, < 29.0.9; >= 30.0.0, < 30.0.2 |
| CVE-2024-37884 | 5.4 | Jun 14 | Nextcloud Server's users can delete old versions of read-only shared files Affected: >= 26.0.0, < 26.0.13; >= 27.0.0, < 27.1.8; >= 28.0.0, < 28.0.4 |
| CVE-2024-22402 | 5.4 | Jan 18 | Improper handling of request URLs in Nextcloud Guests app allows guest users to bypass app allowlist Affected: >= 2.4.0, < 2.4.1; >= 2.5.0, < 2.5.1; >= 3.0.0, < 3.0.1 |
| CVE-2024-22213 | 5.4 | Jan 18 | Cross-site Scripting when sending HTML as a comment in the Nextcloud Deck app Affected: >= 1.9.0, < 1.9.5; >= 1.10.0, < 1.11.2 |
| CVE-2023-49791 | 5.4 | Dec 22 | Workflows do not require password confirmation on API level Affected: >= 23.0.0, < 23.0.12.13; >= 24.0.0, < 24.0.12.9; >= 25.0.0, < 25.0.13.4; >= 26.0.0, < 26.0.9; >= 27.0.0, < 27.1.4 |
| CVE-2023-48302 | 5.4 | Nov 21 | Nextcloud Server vulnerable to Self XSS when pasting HTML into Text app with Ctrl+Shift+V Affected: >= 25.0.0, < 25.0.13; >= 26.0.0, < 26.0.8; >= 27.0.0, < 27.1.3 |
| CVE-2023-48301 | 5.4 | Nov 21 | Nextcloud Server HTML injection in search UI when selecting a circle with HTML in the display name Affected: >= 25.0.0, < 25.0.13; >= 26.0.0, < 26.0.8; >= 27.0.0, < 27.1.3 |
| CVE-2026-45543 | 5.3 | Jun 1 | Nextcloud: Deleting a Forms collaborator share leaves uploaded response files accessible through a lingering Files share Affected: >= 4.3.0, < 5.2.7 |
| CVE-2025-66513 | 5.3 | Dec 5 | Nextcloud Tables app share information not limited to relevant users Affected: >= 1.0.0-beta.1, < 1.0.1; >= 0.9.0-beta.1, < 0.9.6; < 0.8.9 |
| CVE-2025-47791 | 5.3 | May 16 | Nextcloud Server's test remote endpoint is not rate limited Affected: >= 28.0.0, < 28.0.13; >= 29.0.0, < 29.0.10; >= 30.0.0, < 30.0.3 |
| CVE-2024-52521 | 5.3 | Nov 15 | Nextcloud Server has a potential hash collision for background jobs could skip queuing them Affected: >= 28.0.0, < 28.0.10; >= 29.0.0, < 29.0.7 |
| CVE-2023-39959 | 5.3 | Aug 10 | Existence of calendars and address books can be checked by unauthenticated users Affected: >= 25.0.0, < 25.0.9; >= 26.0.0, < 26.0.4; >= 27.0.0, < 27.0.1 |
| CVE-2023-39958 | 5.3 | Aug 10 | Missing brute force protection on password reset token OAuth2 API controller Affected: >= 22.0.0, < 22.2.10.13; >= 23.0.0, < 23.0.12.8; >= 24.0.0, < 24.0.12.5; >= 25.0.0, < 25.0.9; >= 26.0.0, < 26.0.4; >= 27.0.0, < 27.0.1 |