Nextcloud vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
185 matching records
- UnknownCGA-x5cm-rp7x-qp3wOpen the advisoryOct 31, 2026
- UnknownCGA-x7j2-r7rw-9m53Open the advisoryOct 29, 2026
- High7.2CGA-xx3q-8xx5-c4p6Open the advisoryOct 29, 2026
- Medium4.6A SSRF vulnerability found that enables access to internal Chrome Devtools Protocol APIs that can leak the JWT authentication token for another user.Check if you run itEPSS 0.20%Oct 27, 2026
- Medium4.6The user in a group can bypass the group restriction set by an administrator on link sharing, creating share links for a table even though they shouldn't have that per…Check if you run itEPSS 0.17%Oct 27, 2026
- Medium4.3When a team was configured as "visible to everyone", the web UI correctly blocked non-members from viewing the team ("You are not a member of ..."), but the resources…Check if you run itEPSS 0.27%Oct 27, 2026
- Low3.3The Tables app's share-listing endpoint (GET /apps/tables/share/table/{tableId}) did not verify that the requesting user has manage-level permission on the table befor…Check if you run itEPSS 0.11%Oct 27, 2026
- Medium4.3A user could create a docx or odt file with a # in the filename with confidential information such as a credit card number and have it not be marked as confidential.Check if you run itEPSS 0.21%Oct 27, 2026
- Medium5.3CVE-2026-77172 is listed by Nextcloud (Server, Tables, Whiteboard, Files Confidential, Collectives, Richdocuments): Mehrere Schwachstellen.Check if you run itEPSS 0.29%Oct 27, 2026
- Low3.5CVE-2026-77171 is listed by Nextcloud (Server, Tables, Whiteboard, Files Confidential, Collectives, Richdocuments): Mehrere Schwachstellen.Check if you run itEPSS 0.17%Oct 27, 2026
- High7.5Abusing the federated share endpoint, an attacker can write arbitrary rows into the oc_share_external database table.Check if you run itEPSS 0.37%Oct 27, 2026
- Low3.5CVE-2026-67400 is listed by Nextcloud (Server, Tables, Whiteboard, Files Confidential, Collectives, Richdocuments): Mehrere Schwachstellen.Check if you run itEPSS 0.18%Oct 27, 2026
- UnknownCVE-2026-114601 is listed by Nextcloud (Server, Tables, Whiteboard, Files Confidential, Collectives, Richdocuments): Mehrere Schwachstellen.Open the advisoryOct 27, 2026
- UnknownCGA-j65m-mh6r-4f88Open the advisoryOct 21, 2026
- Critical9.2Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 73.31%Oct 13, 2026
- Medium6.8Nextcloud is an open source content collaboration platform.Check if you run itEPSS 0.25%Jun 1, 2026
- High7.1Nextcloud is an open source content collaboration platform.Check if you run itEPSS 0.30%Jun 1, 2026
- Medium5.9Nextcloud is an open source content collaboration platform.Check if you run itEPSS 0.29%Jun 1, 2026
- Medium5.9Nextcloud is an open source content collaboration platform.Check if you run itEPSS 0.29%Jun 1, 2026
- High8.2Nextcloud is an open source content collaboration platform.Check if you run itEPSS 0.32%Jun 1, 2026
- Medium4.3Nextcloud is an open source content collaboration platform.Check if you run itEPSS 0.22%Jun 1, 2026
- Medium5.3Nextcloud is an open source content collaboration platform.Check if you run itEPSS 0.27%Jun 1, 2026
- Medium4.3Nextcloud is an open source content collaboration platform.Check if you run itEPSS 0.28%Jun 1, 2026
- Medium6.4Nextcloud is an open source content collaboration platform.Check if you run itEPSS 0.29%Jun 1, 2026
- High8.8Nextcloud is an open source content collaboration platform.Check if you run itEPSS 0.19%Jun 1, 2026