nextcloud security-advisories vulnerabilities

CVEs per yearBy the year they were published

1. 202145
2. 202249
3. 202379
4. 202436
5. 202525
6. 202626

Newest CVEs

• CVE-2026-45810

  Nextcloud: Propfind requests for file comments allowed to load comments for other files

  nextcloud · security-advisories

  Medium6.8
• CVE-2026-45722

  Nextcloud: Tables app allows limited SQLi in ORDER BY with malicious sort order argument for Table Views

  nextcloud · security-advisories

  High7.1
• CVE-2026-45691

  Nextcloud: Bypass of second factor authentication on DAV endpoints

  nextcloud · security-advisories

  Medium5.9
• CVE-2026-45690

  Nextcloud: Two-Factor Authentication Bypass via Pending Session Token Replay

  nextcloud · security-advisories

  Medium5.9
• CVE-2026-45545

  Nextcloud: SQL Injection in Column Type Parameter Allows Arbitrary SQL Execution

  nextcloud · security-advisories

  High8.2
• CVE-2026-45544

  Nextcloud: Information Disclosure of view filter metdata via Broken Sensitive Data Masking in ViewService

  nextcloud · security-advisories

  Medium4.3
• CVE-2026-45543

  Nextcloud: Deleting a Forms collaborator share leaves uploaded response files accessible through a lingering Files share

  nextcloud · security-advisories

  Medium5.3
• CVE-2026-45286

  Nextcloud: Calendar app leaked user identifiers via attendee suggestion endpoint

  nextcloud · security-advisories

  Medium4.3
• CVE-2026-45284

  Nextcloud: Wrong condition in the User OIDC app's LdapService allowed deleted LDAP users to authenticate

  nextcloud · security-advisories

  Medium4.6
• CVE-2026-45285

  Nextcloud: Hidden Public Link creation when sharing to a Team External Member

  nextcloud · security-advisories

  Medium6.4