Login Request a demo
SE
Product
security-advisories
by nextcloud · last CVE Jun 1, 2026
87
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities87In the news0Timeline
Severity mix
Critical 1High 12Medium 62Low 12
Severity
All severities87Critical1High12Medium62Low12
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add security-advisories to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-45266
3.5
0%
Jun 1
Nextcloud: Unauthorized force-mute from missing permission check when using internal signaling
Affected: < 21.1.10; < 22.0.11; < 23.0.3
CVE-2026-45159
3.5
0%
Jun 1
Nextcloud: Files drop share links for end-to-end encrypted folders allowed to drop files into other folders of the share owner
Affected: >= 1.15.0, < 1.15.4; >= 1.16.0, < 1.16.3; >= 1.17.0, < 1.17.1; >= 1.18.0, < 1.18.1
CVE-2024-52514
3.5
1%
Nov 15
Nextcloud Server allows users to copy folder that contain files that are blocked by the files access control
Affected: >= 28.0.0, < 28.0.5; >= 27.0.0, < 27.1.9
CVE-2024-37887
3.5
0%
Jun 14
Nextcloud Server's events information leaked with shared calendars on recurrence exceptions
Affected: >= 27.0.0, < 27.1.10; >= 27.0.0, < 28.0.6; >= 27.0.0, < 29.0.1
CVE-2024-37314
3.5
0%
Jun 14
Nextcloud Photos' shared albums have no restriction on photo removal
Affected: >= 25.0.1, < 25.0.7; >= 26.0.0, < 26.0.2
CVE-2026-45277
3.3
0%
Jun 1
Nextcloud: Information disclosure in Nextcloud Approval app via fileId parameter reveals workflow associations
Affected: < 2.7.2
CVE-2025-66546
3.3
0%
Dec 5
Nextcloud Calendar app allowed booking appointments without the generated token
Affected: >= 6.0.0-rc.1, < 6.0.1; >= 5.0.0-rc.1, < 5.5.6; >= 3.0.0-beta1, < 4.7.19
CVE-2025-66549
2.7
0%
Dec 5
Nextcloud Desktop discloses information when attempting to lock a file inside a end-to-end encrypted directory
Affected: < 3.16.5
CVE-2025-66515
2.7
0%
Dec 5
Nextcloud Approval app allows users to request approval for other users file
Affected: >= 2.0.0, < 2.5.0; < 1.3.1
CVE-2022-31120
2.7
1%
Aug 4
Federated share accepting/declining is not logged in audit log in Nextcloud Server
Affected: >= 23.0.0, < 23.0.4; < 22.2.7
CVE-2026-45155
2.6
0%
Jun 1
Nextcloud: Private circle can be added to another circle via API
Affected: >= 32.0.0, < 32.0.7; >= 33.0.0, < 33.0.1
CVE-2026-45154
2.6
0%
Jun 1
Nextcloud: Improper Access Control in Collectives
Affected: >= 2.6.0, < 4.3.0
Showing 12