[ Vendor · 5 CVEs ]
Nextcloud
CVEs affecting Nextcloud published in the last 30 days, plus any Nextcloud CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-77165 | 21 Sep 2026 | CVSS 6.5 | Nextcloud ServerFile owners were unable to unlock TYPE_TOKEN locks placed by other users, leaving files permanently locked with no recovery path outside of the… | Fix |
| CVE-2026-77166 | 21 Sep 2026 | CVSS 2.4 | Nextcloud CollectivesThe emoji field in the page emoji update endpoint does not properly validate user input. By injecting long text and line breaks, the sidebar layout… | Fix |
| CVE-2026-68493 | 18 Sep 2026 | CVSS 3.1 | Nextcloud ServerAfter guessing a 62^15 complex unique identifier, a malicious logged in user was able to retrieve a list of memberships for a circle they are not a… | Fix |
| CVE-2026-77169 | 18 Sep 2026 | CVSS 6.5 | Nextcloud Team FoldersA vulnerability in the team folders (formerly group folders) app when used in combination with the workspace app allowed API/REST-only delegated… | Fix |
| CVE-2026-82985 | 18 Sep 2026 | CVSS 6.5 | Nextcloud ServerThe Photos app's filter-based "smart albums" build their file listing using the search configuration (photosSourceFolders) of the user viewing the… | Fix |