Security Advisory
CVE-2025-66546
3.3
LOW
Vulnerability Description
Nextcloud Calendar is a calendar app for Nextcloud. Prior to 4.7.19, 5.5.6, and 6.0.1, the calendar app allowed blindly booking appointments with a squential ID without known the appointment token. This vulnerability is fixed in 4.7.19, 5.5.6, and 6.0.1.
Published Date
December 5, 2025
Official Source
NIST NVD Advisory