Nextcloud security-advisories

• CVE-2026-45810 Medium 6.8 Nextcloud: Propfind requests for file comments allowed to load comments for other files 0.3%
• CVE-2026-45722 High 7.1 Nextcloud: Tables app allows limited SQLi in ORDER BY with malicious sort order argument for Table Views 0.3%
• CVE-2026-45691 Medium 5.9 Nextcloud: Bypass of second factor authentication on DAV endpoints 0.3%
• CVE-2026-45690 Medium 5.9 Nextcloud: Two-Factor Authentication Bypass via Pending Session Token Replay 0.3%
• CVE-2026-45545 High 8.2 Nextcloud: SQL Injection in Column Type Parameter Allows Arbitrary SQL Execution 0.3%
• CVE-2026-45544 Medium 4.3 Nextcloud: Information Disclosure of view filter metdata via Broken Sensitive Data Masking in ViewService 0.2%
• CVE-2026-45543 Medium 5.3 Nextcloud: Deleting a Forms collaborator share leaves uploaded response files accessible through a lingering Files share 0.3%
• CVE-2026-45286 Medium 4.3 Nextcloud: Calendar app leaked user identifiers via attendee suggestion endpoint 0.3%
• CVE-2026-45284 Medium 4.6 Nextcloud: Wrong condition in the User OIDC app's LdapService allowed deleted LDAP users to authenticate 0.2%
• CVE-2026-45285 Medium 6.4 Nextcloud: Hidden Public Link creation when sharing to a Team External Member 0.3%
• CVE-2026-45283 Medium 6.3 Nextcloud: Files Lock app allows users to lock and unlock files of other users 0.2%
• CVE-2026-45282 Medium 6.5 Nextcloud: Logged-in user bypasses share password and download restrictions on Text attachments via documentId leads to unauthorized file access 0.3%
• CVE-2026-45281 High 8.1 Nextcloud: Cross-Account Calendar Takeover via Unauthorized Group-Member-Set Update 0.3%
• CVE-2026-45279 Medium 4.4 Nextcloud: Limited path traversal via template API if using `{lang}` in config 0.4%
• CVE-2026-45278 Low 3.3 Nextcloud: Open Redirect in user_oidc login flow via protocol-relative URL bypass 0.2%
• CVE-2026-45277 Low 3.3 Nextcloud: Information disclosure in Nextcloud Approval app via fileId parameter reveals workflow associations 0.1%
• CVE-2026-45275 Medium 6.5 Nextcloud: Authorization bypass in approval feature allows unauthorized file sharing with approvers 0.4%
• CVE-2026-45267 Medium 6.5 Nextcloud: Missing permission check for from submissions 0.3%
• CVE-2026-45266 Low 3.5 Nextcloud: Unauthorized force-mute from missing permission check when using internal signaling 0.2%
• CVE-2026-45159 Low 3.5 Nextcloud: Files drop share links for end-to-end encrypted folders allowed to drop files into other folders of the share owner 0.2%
• CVE-2026-45157 Medium 6.3 Nextcloud: Valid share tokens allow to access tempory upload files of share owner 0.2%
• CVE-2026-45156 High 8.1 Nextcloud: Authentication Bypass in ID4me handling via Missing JWT Signature Verification in User OIDC 0.4%
• CVE-2026-45155 Low 2.6 Nextcloud: Private circle can be added to another circle via API 0.2%
• CVE-2026-45154 Low 2.6 Nextcloud: Improper Access Control in Collectives 0.2%
• CVE-2026-45153 Medium 4.6 Nextcloud: PIN bypass in PassCodeActivity via back button 0.2%
• CVE-2026-45264 Medium 4.3 Nextcloud: ACL Rename Permission Bypass in Team Folders Allows Unauthorized File Renames 0.2%
• CVE-2025-66558 Low 3.1 Nextcloud Twofactor WebAuthn app was updated based on public key 0.3%
• CVE-2025-66556 Low 3.5 Nextcloud talk allows participants to blindly delete poll drafts of other users by ID 0.3%
• CVE-2025-66554 Low 3.5 Nextcloud Contacts vulnerable to Stored XSS in contacts app via organisation and title field 0.3%
• CVE-2025-66549 Low 2.4 Nextcloud Desktop discloses information when attempting to lock a file inside a end-to-end encrypted directory 0.3%
• CVE-2025-66545 Low 3.5 Nextcloud Groupfolders users with read-only permissions for team folder can restore deleted files from trash bin 0.3%
• CVE-2025-66515 Low 2.7 Nextcloud Approval app allows users to request approval for other users file 0.3%
• CVE-2025-66514 Low 3.5 Nextcloud Mail stored HTML injection in subject text 0.3%
• CVE-2025-66557 Medium 5.4 Nextcloud Deck app allowed user with "Can share" permission to modify permissions of other non-owners 0.3%
• CVE-2025-66548 Low 3.3 Nextcloud Deck app allows to spoof file extensions by using RTLO characters 0.2%
• CVE-2025-66553 Medium 4.3 Nextcloud Tables app allowed users to view columns metadata information of any table 0.3%
• CVE-2025-66551 Medium 6.3 Nextcloud Tables is missing an ownership check which allows moving columns into tables of other users 0.3%
• CVE-2025-66513 Medium 4.3 Nextcloud Tables app share information not limited to relevant users 0.3%
• CVE-2025-66550 Medium 5.7 Nextcloud Calendar attachments of local files are offered to downloaded 0.4%
• CVE-2025-66546 Low 3.3 Nextcloud Calendar app allowed booking appointments without the generated token 0.1%
• CVE-2025-66511 Medium 4.8 Nextcloud Calendar app used predictable proposal participant tokens 0.3%
• CVE-2025-66552 Medium 4.3 Nextcloud Server admin_audit does not log all actions on files in groupfolders 0.3%
• CVE-2025-66547 Medium 4.3 Nextcloud Server users can modify tags on files that do not belong to them 0.3%
• CVE-2025-66512 Medium 5.4 Nextcloud Server vulnerable to XSS in SVG images when opened outside of Nextcloud 0.3%
• CVE-2025-66510 Medium 4.5 Nextcloud Server Contacts Search allowed users to retrieve contact information of other users beyond their contact list 0.4%
• CVE-2025-58051 Medium 6.5 Nextcloud Tables app allowed to include local file via PhpSpreadsheet when importing a table 0.5%
• CVE-2025-47794 Low 2.6 Nextcloud Server vulnerable to insecure temporary file creation, race with write access and permission 0.5%
• CVE-2025-47793 Medium 4.3 Nextcloud Server and Groupfolders app vulnerable to bypass of group folder quota limit using attachment in text file 0.8%
• CVE-2025-47792 Medium 5.0 Nextcloud Desktop 3rdparty applications can create share links via socket API 0.2%
• CVE-2025-47791 Medium 4.3 Nextcloud Server's test remote endpoint is not rate limited 0.4%