SE
Product
server
by Nextcloud · last CVE Oct 27, 2026
10
CVEs
0
On KEV
7.5
Max CVSS
3
New 30D
Severity mix
Critical 0High 2Medium 7Low 1
Watch

Add server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-77167
New
7.5
0%
Oct 27
Abusing the federated share endpoint, an attacker can write arbitrary rows into the oc_share_external database table
Affected: 22.0.0 through 34.0.0
CVE-2024-37313
7.5
0%
Jun 14
Nextcloud server allows the by-pass the second factor
Affected: 26.0.0 before 26.0.13; 27.0.0 before 27.1.8; 28.0.0 before 28.0.4
Showing 2