Skip to content
OpenAdvisories

Product · Nextcloud

security-advisories

260 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-45156 Public exploit

    Nextcloud: Authentication Bypass in ID4me handling via Missing JWT Signature Verification in User OIDC

    Nextcloud is an open source content collaboration platform. From versions 0.3.0 to before 3.1.0, 5.0.0 to before 5.1.0, and 6.0.0 to before 6.4.0, a missing signature verification in User OIDC allowed a malicious ID4me authority to identify as any user. This …

    Nextcloud security-advisories