Skip to content
OpenAdvisories

Product · Nextcloud

Server

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-77172

    App passwords were allowed to bypass password confirmation on sensitive endpoints.

    Nextcloud Server
  • Medium 4.3
    CVE-2026-82984

    When a team was configured as "visible to everyone", the web UI correctly blocked non-members from viewing the team ("Y…

    Nextcloud Server
  • Medium 6.5
    CVE-2026-77165

    File owners were unable to unlock TYPE_TOKEN locks placed by other users, leaving files permanently locked with no reco…

    Nextcloud Server
  • Medium 6.2
    CVE-2026-77164

    Circles' remote-instance signature verification fetches the attacker-supplied keyId URL before trust in the remote inst…

    Nextcloud Server
  • Medium 6.5
    CVE-2026-82985

    The Photos app's filter-based "smart albums" build their file listing using the search configuration (photosSourceFolde…

    Nextcloud Server