Skip to content
OpenAdvisories
Medium WID-SEC-2026-3840 5 CVEs

Nextcloud: Mehrere Schwachstellen

Published Oct 8, 2026 · Updated Oct 8, 2026 · de-DE

Vendor: Nextcloud Product: Nextcloud Platform: Linux

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen im Nextcloud Server und verschiedenen Apps ausnutzen, um Informationen offenzulegen, um Sicherheitsmechanismen zu umgehen und um einen Denial of Service herbeizuführen.

Product

Nextcloud ist eine "on-premise" Plattform für Dateifreigabe und Zusammenarbeit.

Vulnerabilities 5

  • Medium 6.5
    CVE-2026-77165

    File owners were unable to unlock TYPE_TOKEN locks placed by other users, leaving files permanently locked with no reco…

    Nextcloud Server
  • Medium 6.5
    CVE-2026-77169

    A vulnerability in the team folders (formerly group folders) app when used in combination with the workspace app allowe…

    Nextcloud Team Folders
  • Medium 6.5
    CVE-2026-82985

    The Photos app's filter-based "smart albums" build their file listing using the search configuration (photosSourceFolde…

    Nextcloud Server
  • Low 3.1
    CVE-2026-68493

    After guessing a 62^15 complex unique identifier, a malicious logged in user was able to retrieve a list of memberships…

    Nextcloud Server nextcloud-server-33 Wolfi
  • Low 2.4
    CVE-2026-77166

    The emoji field in the page emoji update endpoint does not properly validate user input. By injecting long text and lin…

    Nextcloud Collectives

Revision history

  1. #1

    Initiale Fassung

References