Login Request a demo
UO
Product
User Oidc
by Nextcloud · last CVE Jun 1, 2026
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 1High 2Medium 6Low 0
Severity
All severities9Critical1High2Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add User Oidc to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-37312
6.3
1%
Jun 14
Nextcloud user_oidc app's ID4me feature is available even when disabled
Affected: before 5.0.0
CVE-2026-45278
6.1
0%
Jun 1
Nextcloud: Open Redirect in user_oidc login flow via protocol-relative URL bypass
Affected: 6.1.0 before 8.2.2
CVE-2024-52512
6.1
0%
Nov 15
Nextcloud User OIDC has an open redirection when logging in with User OIDC
Affected: 6.0.0 before 6.1.0
CVE-2023-28848
5.4
0%
Apr 4
CSRF protection on user_oidc login returned the expected token in case of an error
Affected: 1.0.0 before 1.3.0
CVE-2023-39953
4.8
1%
Aug 10
Issuer not verified from obtained token in user_oidc
Affected: 1.0.0 before 1.3.3
CVE-2024-37886
4.7
0%
Jun 14
Nextcloud user_oidc's ID4me does not validate signature or expiration
Affected: before 1.3.5
Showing 6