SE
Product
security-advisories
215
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 37Medium 145Low 25
Watch
Add security-advisories to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-45277 | 3.3 | Jun 1 | Nextcloud: Information disclosure in Nextcloud Approval app via fileId parameter reveals workflow associations Affected: < 2.7.2 |
| CVE-2025-66546 | 3.3 | Dec 5 | Nextcloud Calendar app allowed booking appointments without the generated token Affected: >= 6.0.0-rc.1, < 6.0.1; >= 5.0.0-rc.1, < 5.5.6; >= 3.0.0-beta1, < 4.7.19 |
| CVE-2022-29160 | 3.3 | May 20 | Sensitive files/data exist after deletion of user account in Nextcloud Android Affected: < 3.19.0 |
| CVE-2025-66549 | 2.7 | Dec 5 | Nextcloud Desktop discloses information when attempting to lock a file inside a end-to-end encrypted directory Affected: < 3.16.5 |
| CVE-2025-66515 | 2.7 | Dec 5 | Nextcloud Approval app allows users to request approval for other users file Affected: >= 2.0.0, < 2.5.0; < 1.3.1 |
| CVE-2023-48303 | 2.7 | Nov 21 | Nextcloud Server admins can change authentication details of user configured external storage Affected: >= 25.0.0, < 25.0.11; >= 26.0.0, < 26.0.6; >= 27.0.0, < 27.1.0 |
| CVE-2022-41969 | 2.7 | Dec 1 | Nextcloud Server has no password length limit when creating a user as an administrator Affected: < 23.0.11; >= 24.0.0, < 24.0.7 |
| CVE-2022-35931 | 2.7 | Sep 6 | Nextcloud Password Policy's generated passwords are not fully validated by HIBPValidator Affected: >= 24.0.0, < 24.0.3; < 22.2.10; >= 23.0.0, < 23.0.7 |
| CVE-2022-31120 | 2.7 | Aug 4 | Federated share accepting/declining is not logged in audit log in Nextcloud Server Affected: >= 23.0.0, < 23.0.4; < 22.2.7 |
| CVE-2026-45155 | 2.6 | Jun 1 | Nextcloud: Private circle can be added to another circle via API Affected: >= 32.0.0, < 32.0.7; >= 33.0.0, < 33.0.1 |
| CVE-2026-45154 | 2.6 | Jun 1 | Nextcloud: Improper Access Control in Collectives Affected: >= 2.6.0, < 4.3.0 |
| CVE-2023-28646 | 2.4 | Mar 30 | App lockout in nextcloud Android app can be bypassed via thirdparty apps Affected: >= 3.7.0, < 3.24.1 |
| CVE-2022-24885 | 2.4 | Apr 27 | Improper Authentication in Nextcloud Android Files Affected: < 3.19.1 |
| CVE-2021-41181 | 2.4 | Mar 8 | Nextcloud Talk app exposes chat messages on lockscreen Affected: < 12.3.0 |
| CVE-2023-22473 | 2.1 | Jan 9 | Passcode bypass on Talk-Android app Affected: < 15.0.2 |