Where
-Infinity
0

Nextcloud TalkNextcloud talk allows participants to blindly delete poll drafts of other users by ID

Risk 22
Severity
4.3
First published (updated )

NextCloud TalkPassword of talk conversations can be bruteforced in Nextcloud

Risk 22
Severity
4.3
First published (updated )

Nextcloud Talk AndroidPath traversal allows tricking the Talk Android app into writing files into it's root directory

Risk 68
Severity
7.8
First published (updated )

NextCloud TalkChat poll data can still be queried from API after purging history in Nextcloud talk

Risk 22
Severity
4.3
First published (updated )

NextCloud TalkChat room membership disclosed via autocompletion in Nextcloud talk

Risk 19
Severity
3.5
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Nextcloud Nextcloud TalkNextcloud Talk messages can still be seen on conversation after expiring when cron is misconfigured

Risk 22
Severity
4.3
First published (updated )

Nextcloud Talk AndroidPasscode bypass on Talk-Android app

Risk 12
Severity
2.1
First published (updated )

Nextcloud Nextcloud Talk AndroidNextcloud Talk guests can continue to receive video streams from call after being removed from a conversation

Risk 38
Severity
6.5
First published (updated )

Nextcloud Talk AndroidNextcloud Talk Android broadcast incorrect permission handling

Risk 31
Severity
5.5
First published (updated )

NextCloud TalkLast video frame is still sent after video is disabled in a call in Nextcloud Talk

Risk 27
Severity
5.3
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

NextCloud TalkMissing rate limit when trying to join a password protected Nextcloud Talk conversation

Risk 27
Severity
5.3
First published (updated )

NextCloud TalkExposure of Private Personal Information to an Unauthorized Actor in Nextcloud Talk

Risk 22
Severity
4.3
First published (updated )

NextCloud TalkOpen Redirect in Nextcloud Talk

Risk 38
Severity
6.1
First published (updated )

Nextcloud Talk AndroidNextcloud Talk app exposes chat messages on lockscreen

Risk 14
Severity
2.4
First published (updated )

Nextcloud Talk AndroidGeolocation preview links can be set to arbitrary links in nextcloud talk

Risk 38
Severity
6.1
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

NextCloud TalkXSS in Talk

Risk 48
Severity
6.4
First published (updated )

NextCloud TalkNextcloud Talk not properly disassociating users from chats after account deletion

Risk 60
Severity
8.1
First published (updated )

NextCloud TalkSession Fixation in Nextcloud Talk

Risk 38
Severity
6.5
First published (updated )

NextCloud TalkCode Injection

Risk 82
Severity
9.9
First published (updated )

NextCloud TalkImproper access control in Nextcloud Talk 6.0.3 leaks the existance and the name of private conversa…

Risk 21
Severity
4
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Nextcloud DeckXSS

Risk 29
Severity
4.8
First published (updated )

NextCloud TalkXSS

Risk 34
Severity
5.4
First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203