Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how nextcloud compares to other vendors in security performance

View Risk Score →

Software

nextcloud server
174
nextcloud
27
nextcloud desktop client
22
nextcloud talk
21
nextcloud deck
17
nextcloud nextcloud server
17
nextcloud enterprise server
16
nextcloud mail
15
nextcloud nextcloud
13
nextcloud nextcloud enterprise server
11
nextcloud calendar
10
nextcloud user oidc
9
nextcloud richdocuments
8
nextcloud tables nextcloud
6
nextcloud contacts
5
nextcloud desktop
5
nextcloud approval nextcloud
3
nextcloud circles
3
nextcloud groupfolders
3
nextcloud nextcloud tables
3
nextcloud tables
3
nextcloud end-to-end encryption
2
nextcloud guests
2
nextcloud nextcloud approval app
2
nextcloud notes
2
nextcloud openid connect user backend
2
nextcloud preferred providers
2
nextcloud social
2
nextcloud/calendar
2
nextcloud cookbook
1
nextcloud extract
1
nextcloud files access control
1
nextcloud flow
1
nextcloud forms
1
nextcloud global site selector
1
nextcloud group folders
1
nextcloud lookup server
1
nextcloud mail nextcloud
1
nextcloud news
1
nextcloud nextcloud android
1
nextcloud nextcloud android app
1
nextcloud nextcloud calendar
1
nextcloud nextcloud deck
1
nextcloud nextcloud desktop
1
nextcloud nextcloud forms
1
nextcloud nextcloud iphone os
1
nextcloud nextcloud mail
1
nextcloud nextcloud news
1
nextcloud nextcloud tables app
1
nextcloud nextcloud talk
1

BleepingComputerFFmpeg fixes PixelSmash flaw in widely used video decoder

Exploited
First published (updated )
News
BleepingComputer

Nextcloud NextCloud ServerNextcloud: Propfind requests for file comments allowed to load comments for other files

Risk 38
Severity
6.8
First published (updated )
CVE-2026-45810

Nextcloud Tables NextcloudNextcloud: Tables app allows limited SQLi in ORDER BY with malicious sort order argument for Table Views

Risk 48
Severity
7.1
First published (updated )
CVE-2026-45722

Nextcloud NextCloud ServerNextcloud: Bypass of second factor authentication on DAV endpoints

Risk 42
Severity
5.9
First published (updated )
CVE-2026-45691

Nextcloud NextCloud ServerNextcloud: Two-Factor Authentication Bypass via Pending Session Token Replay

Risk 42
Severity
5.9
First published (updated )
CVE-2026-45690
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Nextcloud Tables NextcloudNextcloud: SQL Injection in Column Type Parameter Allows Arbitrary SQL Execution

Risk 60
Severity
8.2
First published (updated )
CVE-2026-45545

Nextcloud Nextcloud TablesNextcloud: Information Disclosure of view filter metdata via Broken Sensitive Data Masking in ViewService

Risk 22
Severity
4.3
First published (updated )
CVE-2026-45544

Nextcloud Nextcloud FormsNextcloud: Deleting a Forms collaborator share leaves uploaded response files accessible through a lingering Files share

Risk 27
Severity
5.3
First published (updated )
CVE-2026-45543

Nextcloud calendarNextcloud: Calendar app leaked user identifiers via attendee suggestion endpoint

Risk 22
Severity
4.3
First published (updated )
CVE-2026-45286

Nextcloud Nextcloud User OIDC appNextcloud: Wrong condition in the User OIDC app's LdapService allowed deleted LDAP users to authenticate

Risk 79
Severity
8.8
First published (updated )
CVE-2026-45284
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Nextcloud NextCloud ServerNextcloud: Hidden Public Link creation when sharing to a Team External Member

Risk 48
Severity
6.4
First published (updated )
CVE-2026-45285

Nextcloud NextCloud ServerNextcloud: Files Lock app allows users to lock and unlock files of other users

Risk 46
Severity
6.3
First published (updated )
CVE-2026-45283

Nextcloud NextCloud ServerNextcloud: Logged-in user bypasses share password and download restrictions on Text attachments via documentId leads to unauthorized file access

Risk 38
Severity
6.5
First published (updated )
CVE-2026-45282

Nextcloud NextCloud ServerNextcloud: Cross-Account Calendar Takeover via Unauthorized Group-Member-Set Update

Risk 60
Severity
8.1
First published (updated )
CVE-2026-45281

Nextcloud NextCloud ServerNextcloud: Limited path traversal via template API if using `{lang}` in config

Risk 38
Severity
6.5
First published (updated )
CVE-2026-45279
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Nextcloud NextcloudNextcloud: Open Redirect in user_oidc login flow via protocol-relative URL bypass

Risk 38
Severity
6.1
First published (updated )
CVE-2026-45278

Nextcloud Nextcloud Approval appNextcloud: Information disclosure in Nextcloud Approval app via fileId parameter reveals workflow associations

Risk 18
Severity
3.3
First published (updated )
CVE-2026-45277

Nextcloud Nextcloud Approval appNextcloud: Authorization bypass in approval feature allows unauthorized file sharing with approvers

Risk 38
Severity
6.5
First published (updated )
CVE-2026-45275

Nextcloud NextcloudNextcloud: Missing permission check for from submissions

Risk 38
Severity
6.5
First published (updated )
CVE-2026-45267

Nextcloud NextcloudNextcloud: Unauthorized force-mute from missing permission check when using internal signaling

Risk 19
Severity
3.5
First published (updated )
CVE-2026-45266
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Nextcloud NextcloudNextcloud: Files drop share links for end-to-end encrypted folders allowed to drop files into other folders of the share owner

Risk 19
Severity
3.5
First published (updated )
CVE-2026-45159

Nextcloud NextCloud ServerNextcloud: Valid share tokens allow to access tempory upload files of share owner

Risk 43
Severity
6.3
First published (updated )
CVE-2026-45157

Nextcloud NextcloudNextcloud: Authentication Bypass in ID4me handling via Missing JWT Signature Verification in User OIDC

Risk 59
Severity
8.1
First published (updated )
CVE-2026-45156

Nextcloud NextCloud ServerNextcloud: Private circle can be added to another circle via API

Risk 15
Severity
2.6
First published (updated )
CVE-2026-45155

Nextcloud NextcloudNextcloud: Improper Access Control in Collectives

Risk 15
Severity
2.6
First published (updated )
CVE-2026-45154
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Nextcloud Nextcloud Android appNextcloud: PIN bypass in PassCodeActivity via back button

Risk 32
Severity
4.6
First published (updated )
CVE-2026-45153

Nextcloud NextcloudNextcloud: ACL Rename Permission Bypass in Team Folders Allows Unauthorized File Renames

Risk 22
Severity
4.3
First published (updated )
CVE-2026-45264

Nextcloud Nextcloud NewsNextcloud News: Authenticated blind SSRF via feed URL

Risk 25
Severity
2.3
First published (updated )
CVE-2026-44515

Windmill WindmillWindmill < 1.615.0 Operator Role Missing Authorization Checks RCE

Risk 79
Severity
8.7
First published (updated )
CVE-2026-22683

Nextcloud NextCloud ServerNextcloud Server 30.0.0 is vulnerable to an Insecure Direct Object Reference (IDOR) in the /core/pre…

Risk 22
Severity
4.3
First published (updated )
CVE-2025-64011
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203