nextcloud Vulnerability Advisory Catalog

Total 372 security vulnerabilities recorded for nextcloud software and firmware.

← Back to All Vendors
Component: nextcloud_server

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 31.0.0 to before 31.0.12, and 32.0.0 to before 32.0.3, a...

📅 2026-06-01
CVSS 6.8 Dossier →
Component: tables

Nextcloud is an open source content collaboration platform. From versions 0.9.0 to before 0.9.7, and 1.0.0 to before 1.0.2, a missing sanitization in ...

📅 2026-06-01
CVSS 7.1 Dossier →
Component: nextcloud_server

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, a ...

📅 2026-06-01
CVSS 5.9 Dossier →
Component: nextcloud_server

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, an...

📅 2026-06-01
CVSS 5.9 Dossier →
Component: tables

Nextcloud is an open source content collaboration platform. From versions 0.7.0 to before 0.7.7, 0.8.0 to before 0.8.10, 0.9.0 to before 0.9.8, and 1....

📅 2026-06-01
CVSS 8.2 Dossier →
Component: tables

Nextcloud is an open source content collaboration platform. From version 0.8.0 to before version 1.0.4, the view filter criteria is exposed to users w...

📅 2026-06-01
CVSS 4.3 Dossier →
Component: forms

Nextcloud is an open source content collaboration platform. From version 4.3.0 to before version 5.2.7, a removed collaborator retains unauthorized re...

📅 2026-06-01
CVSS 5.3 Dossier →
Component: calendar

Nextcloud is an open source content collaboration platform. From versions 5.5.13 to before 5.5.17, and 6.2.0 to before 6.2.3, an authenticated user ca...

📅 2026-06-01
CVSS 4.3 Dossier →
Component: nextcloud_server

Nextcloud is an open source content collaboration platform. From versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, when a user shares a f...

📅 2026-06-01
CVSS 6.4 Dossier →
Component: user_oidc

Nextcloud is an open source content collaboration platform. From version 1.3.6 to before version 8.4.0, an improper check allowed users that where pro...

📅 2026-06-01
CVSS 4.6 Dossier →
Component: nextcloud_server

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.2, and 33.0.0 to before 33.0.1, th...

📅 2026-06-01
CVSS 6.3 Dossier →
Component: nextcloud_server

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, an...

📅 2026-06-01
CVSS 6.5 Dossier →
Component: nextcloud_server

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, wi...

📅 2026-06-01
CVSS 8.1 Dossier →
Component: nextcloud_server

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 31.0.0 to before 31.0.14, and 32.0.0 to before 32.0.4, i...

📅 2026-06-01
CVSS 4.4 Dossier →
Component: user_oidc

Nextcloud is an open source content collaboration platform. From version 6.1.0 to before version 8.2.2, an attacker can craft links that would redirec...

📅 2026-06-01
CVSS 3.3 Dossier →
Component: approval

Nextcloud is an open source content collaboration platform. Prior to version 2.7.2, authenticated users can check if arbitrary files are associated wi...

📅 2026-06-01
CVSS 3.3 Dossier →
Component: approval

Nextcloud is an open source content collaboration platform. Prior to version 2.7.2, a privilege escalation vulnerability exists in the Approval app th...

📅 2026-06-01
CVSS 6.5 Dossier →
Component: flow

Windmill versions 1.56.0 through 1.614.0 contain a missing authorization vulnerability that allows users with the Operator role to perform prohibited ...

📅 2026-04-07
CVSS 8.8 Dossier →
Component: nextcloud_server

Nextcloud Server 30.0.0 is vulnerable to an Insecure Direct Object Reference (IDOR) in the /core/preview endpoint. Any authenticated user can access p...

📅 2025-12-12
CVSS 4.3 Dossier →
Component: two-factor_webauthn

Nextcloud Twofactor WebAuthn is the WebAuthn Two-Factor Provider for Nextcloud. Prior to 1.4.2 and 2.4.1, a missing ownership check allowed an attack ...

📅 2025-12-05
CVSS 3.1 Dossier →
Component: deck

Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. Prior to 1...

📅 2025-12-05
CVSS 5.4 Dossier →
Component: talk

Nextcloud talk is a video & audio conferencing app for Nextcloud. Prior to 20.1.8 and 21.1.2, a participant with chat permissions was able to delete p...

📅 2025-12-05
CVSS 3.5 Dossier →
Component: contacts

Contacts app for Nextcloud easily syncs contacts from various devices with your Nextcloud and allows editing. Prior to 5.5.4, 6.0.6, and 7.2.5, a mali...

📅 2025-12-05
CVSS 3.5 Dossier →
Component: tables

Nextcloud Tables allows you to create your own tables with individual columns. Prior to 0.8.7 and 0.9.4, authenticated users were able to view meta da...

📅 2025-12-05
CVSS 4.3 Dossier →
Page 1 of 16 (372 Total Records)