GHSA-94G3-G5V7-Q4JG vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-40194 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-27QH-8CXX-2CR5 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-27QH-8CXX-2CR5 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-40194 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-R854-JRXH-36QX vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-94G3-G5V7-Q4JG vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-32935 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-QQC2-7F54-R7WP vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-46FQ-V4PG-GR3J vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-X92J-G74P-P2HQ vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-46FQ-V4PG-GR3J vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-X92J-G74P-P2HQ vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-QQC2-7F54-R7WP vulnerabilities

Vulnerabilities for packages: nextcloud-server...

Nextcloud: Critical broken access control: API-only delegated admin can enumerate all Team Folders and grant access to arbitrary groups

A critical broken access control vulnerability was discovered in Nextcloud's Group Folders app. The vulnerability allowed an API/REST only delegated admin to bypass folder-level authorization and gain access to any Team Folder by abusing the POST /index.php/apps/groupfolders/folders/id/groups...

EUVD-2026-21106

OpenClaw before 2026.3.22 contains a policy confusion vulnerability in room authorization that matches colliding room names instead of stable room tokens. Attackers can exploit similarly named rooms to bypass allowlist policies and gain unauthorized access to protected Nextcloud Talk rooms...

Duplicate Advisory: OpenClaw: Nextcloud Talk room allowlist matched colliding room names instead of stable room tokens

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-xhq5-45pm-2gjr. This link is maintained to preserve external references. Original Description OpenClaw before 2026.3.22 contains a policy confusion vulnerability in room authorization that matches colliding room...

GHSA-5F7H-P83X-5VC2 Duplicate Advisory: OpenClaw: Nextcloud Talk room allowlist matched colliding room names instead of stable room tokens

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-xhq5-45pm-2gjr. This link is maintained to preserve external references. Original Description OpenClaw before 2026.3.22 contains a policy confusion vulnerability in room authorization that matches colliding room...

CVE-2026-35624

OpenClaw before 2026.3.22 contains a policy confusion vulnerability in room authorization that matches colliding room names instead of stable room tokens. Attackers can exploit similarly named rooms to bypass allowlist policies and gain unauthorized access to protected Nextcloud Talk rooms...

CVE-2026-35624 OpenClaw < 2026.3.22 - Policy Confusion via Room Name Collision in Nextcloud Talk

OpenClaw before 2026.3.22 contains a policy confusion vulnerability in room authorization that matches colliding room names instead of stable room tokens. Attackers can exploit similarly named rooms to bypass allowlist policies and gain unauthorized access to protected Nextcloud Talk rooms...