What’s Vulnerable › Products

nextcloud security-advisories vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.

Check whether your nextcloud security-advisories version is affected

Latest nextcloud security-advisories vulnerabilities

• CVE-2026-45267 — Nextcloud: Missing permission check for from submissions (CVSS 6.5)
• CVE-2026-45266 — Nextcloud: Unauthorized force-mute from missing permission check when using internal signaling (CVSS 3.5)
• CVE-2026-45264 — Nextcloud: ACL Rename Permission Bypass in Team Folders Allows Unauthorized File Renames (CVSS 4.3)
• CVE-2026-45159 — Nextcloud: Files drop share links for end-to-end encrypted folders allowed to drop files into other folders of the share owner (CVSS 3.5)
• CVE-2026-45157 — Nextcloud: Valid share tokens allow to access tempory upload files of share owner (CVSS 6.3)
• CVE-2026-45156 — Nextcloud: Authentication Bypass in ID4me handling via Missing JWT Signature Verification in User OIDC (CVSS 8.1)
• CVE-2026-45155 — Nextcloud: Private circle can be added to another circle via API (CVSS 2.6)
• CVE-2026-45154 — Nextcloud: Improper Access Control in Collectives (CVSS 2.6)
• CVE-2026-45153 — Nextcloud: PIN bypass in PassCodeActivity via back button (CVSS 4.6)
• CVE-2025-58051 — Nextcloud Tables app allowed to include local file via PhpSpreadsheet when importing a table (CVSS 6.5)