nextcloud security-advisories vulnerabilities
260 published CVEs name nextcloud security-advisories among the affected products.
- 260Published CVEs258 of them scored
- 45Last 12 monthspublished in the last year
- 3Critical31 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-45810
Nextcloud: Propfind requests for file comments allowed to load comments for other files
nextcloud · security-advisories
Medium6.8 - CVE-2026-45722
Nextcloud: Tables app allows limited SQLi in ORDER BY with malicious sort order argument for Table Views
nextcloud · security-advisories
High7.1 - CVE-2026-45691
Nextcloud: Bypass of second factor authentication on DAV endpoints
nextcloud · security-advisories
Medium5.9 - CVE-2026-45690
Nextcloud: Two-Factor Authentication Bypass via Pending Session Token Replay
nextcloud · security-advisories
Medium5.9 - CVE-2026-45545
Nextcloud: SQL Injection in Column Type Parameter Allows Arbitrary SQL Execution
nextcloud · security-advisories
High8.2 - CVE-2026-45544
Nextcloud: Information Disclosure of view filter metdata via Broken Sensitive Data Masking in ViewService
nextcloud · security-advisories
Medium4.3 - CVE-2026-45543
Nextcloud: Deleting a Forms collaborator share leaves uploaded response files accessible through a lingering Files share
nextcloud · security-advisories
Medium5.3 - CVE-2026-45286
Nextcloud: Calendar app leaked user identifiers via attendee suggestion endpoint
nextcloud · security-advisories
Medium4.3 - CVE-2026-45284
Nextcloud: Wrong condition in the User OIDC app's LdapService allowed deleted LDAP users to authenticate
nextcloud · security-advisories
Medium4.6 - CVE-2026-45285
Nextcloud: Hidden Public Link creation when sharing to a Team External Member
nextcloud · security-advisories
Medium6.4