What’s Vulnerable › Products

Nextcloud Calendar application vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your Nextcloud Calendar application version is affected

Latest Nextcloud Calendar application vulnerabilities

• CVE-2026-45286 — Nextcloud: Calendar app leaked user identifiers via attendee suggestion endpoint (CVSS 4.3)
• CVE-2025-66550 — Nextcloud Calendar attachments of local files are offered to downloaded (CVSS 5.7)
• CVE-2025-66546 — Nextcloud Calendar app allowed booking appointments without the generated token (CVSS 3.3)
• CVE-2025-66511 — Nextcloud Calendar app used predictable proposal participant tokens (CVSS 6.5)
• CVE-2024-37316 — Nextcloud Calendar's event create can create attachments that link to other websites (CVSS 4.6)
• CVE-2023-48308 — Calendar app returns full stacktrace when an error happens while editing appointment (CVSS 6.5)
• CVE-2023-45150 — Inviting excessive long email addresses to a calendar event makes the Nextcloud server unresponsive (CVSS 4.3)
• CVE-2023-33183 — Error in calendar when booking an appointment reveals the full path of the website (CVSS 4.3)
• CVE-2022-24838 — Command Injection in Appointment Emails for Nextcloud Calendar (CVSS 9.8)
• CVE-2018-3763 — (CVSS 4.8)