What’s Vulnerable › Products

cbcoutinho nextcloud-mcp-server vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your cbcoutinho nextcloud-mcp-server version is affected

Latest cbcoutinho nextcloud-mcp-server vulnerabilities

• CVE-2026-55640 — Nextcloud MCP Server: Unauthenticated `POST /webhooks/nextcloud` allows arbitrary vector data deletion when `WEBHOOK_SECRET` is unset ( default ) (CVSS 9.1)