GHSA-X6G4-FWCC-JJ8W vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-46644 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-45068 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-45070 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-45071 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-72XP-P242-47P9 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-45065 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-QPMX-3RFJ-7RHV vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-2XF4-CG6J-VHGQ vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-X6G4-FWCC-JJ8W vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-45067 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-46644 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-VQC8-7275-Q272 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-XX3C-QF5G-HC39 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

SUSE CVE-2026-45155

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.7 and 33.0.0 to before 33.0.1, a missing access check on API level allowed to add unknown circles by their ID directly to other circles. Since circle IDs have 62^15 complexity by...

CVE-2026-45282

A flaw was found in Nextcloud Server. An authenticated attacker, by knowing a share token and a document ID, could access attachments of link shares. This circumvents password protection or download restrictions, leading to the disclosure of sensitive information from attachments. Mitigation...

The vulnerability of the endpoint of the cloud software for creating and using a data storage service called Nextcloud Server allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the endpoint of the cloud software for creating and using a data storage service, Nextcloud Server, involves bypassing authentication using a key controlled by the user. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to...

The vulnerability of the application for integrating PDF.js files with cloud-based software for creating and using data storage systems like NextCloud Server allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the application for integrating PDF.js files with cloud-based software for creating and using data storage in NextCloud Server is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scriptin...

CVE-2026-45155

A flaw was found in Nextcloud Server. A missing access check at the API Application Programming Interface level could allow an authenticated attacker, who has access to a circle ID from another source, to add unknown circles to other circles. This could lead to the disclosure of circle membership...

CVE-2026-45283

A flaw was found in Nextcloud Server. An authenticated user could exploit this vulnerability to lock or unlock files belonging to other users by manipulating WebDAV Web Distributed Authoring and Versioning paths. This issue also led to the disclosure of lock tokens in error responses, potentially...