Nextcloud vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
185 matching records
- Medium4.3Nextcloud is an open source content collaboration platform.Check if you run itEPSS 0.21%Jun 1, 2026
- Medium6.5Nextcloud is an open source content collaboration platform.Check if you run itEPSS 0.29%Jun 1, 2026
- High8.1Nextcloud is an open source content collaboration platform.Check if you run itEPSS 0.28%Jun 1, 2026
- Medium6.5Nextcloud is an open source content collaboration platform.Check if you run itEPSS 0.39%Jun 1, 2026
- Medium6.1Nextcloud is an open source content collaboration platform.Check if you run itEPSS 0.23%Jun 1, 2026
- Low3.3Nextcloud is an open source content collaboration platform.Check if you run itEPSS 0.13%Jun 1, 2026
- Medium6.5Nextcloud is an open source content collaboration platform.Check if you run itEPSS 0.36%Jun 1, 2026
- Medium6.5Nextcloud is an open source content collaboration platform.Check if you run itEPSS 0.29%Jun 1, 2026
- Low3.5Nextcloud is an open source content collaboration platform.Check if you run itEPSS 0.20%Jun 1, 2026
- Medium4.3Nextcloud is an open source content collaboration platform.Check if you run itEPSS 0.23%Jun 1, 2026
- Low3.5Nextcloud is an open source content collaboration platform.Check if you run itEPSS 0.20%Jun 1, 2026
- Medium6.3Nextcloud is an open source content collaboration platform.Check if you run itEPSS 0.23%Jun 1, 2026
- High8.1Nextcloud is an open source content collaboration platform.Check if you run itEPSS 0.41%Jun 1, 2026
- Low2.6Nextcloud is an open source content collaboration platform.Check if you run itEPSS 0.20%Jun 1, 2026
- Low2.6Nextcloud is an open source content collaboration platform.Check if you run itEPSS 0.19%Jun 1, 2026
- Medium4.6Nextcloud is an open source content collaboration platform.Check if you run itEPSS 0.15%Jun 1, 2026
- Low2.3Nextcloud News is an RSS/Atom feed reader.Check if you run itEPSS 0.18%May 14, 2026
- Low2.3OpenClaw before 2026.3.22 contains a policy confusion vulnerability in room authorization that matches colliding room names instead of stable room tokens.Check if you run itEPSS 0.24%Apr 9, 2026
- High8.7Windmill versions 1.56.0 through 1.614.0 contain a missing authorization vulnerability that allows users with the Operator role to perform prohibited entity creation a…Check if you run itEPSS 2.61%Apr 7, 2026
- Medium6.3OpenClaw before 2026.3.28 contains a missing rate limiting vulnerability in the Nextcloud Talk webhook authentication that allows attackers to brute-force weak shared secrets.Check if you run itEPSS 0.37%Mar 31, 2026
- Medium5.5Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.Check if you run itEPSS 0.32%Mar 26, 2026
- Medium6.3OpenClaw versions prior to 2026.2.25 lack durable replay state for Nextcloud Talk webhook events, allowing valid signed webhook requests to be replayed without suppression.Check if you run itEPSS 0.28%Mar 19, 2026
- Critical9.3OpenClaw's Nextcloud Talk plugin versions prior to 2026.2.6 accept equality matching on the mutable actor.name display name field for allowlist validation, allowing at…Check if you run itEPSS 0.55%Mar 5, 2026
- Medium5.3OwnCloud 8.1.8 contains a username enumeration vulnerability that allows remote attackers to discover user accounts by manipulating the share.php endpoint.Check if you run itEPSS 0.47%Feb 12, 2026
- Medium4.3Nextcloud Server 30.0.0 is vulnerable to an Insecure Direct Object Reference (IDOR) in the /core/preview endpoint.Check if you run itEPSS 0.32%Dec 12, 2025