Nextcloud: SSRF via User-Controlled Push proxyServer in Notifications Push Registration

A server-side request forgery vulnerability was discovered in the notifications application version 5.0.0. An authenticated user with low privileges could register a push device with an attacker-controlled proxy server address through the push registration endpoint. When a notification was...

PT-2026-27226

OpenClaw before 2026.2.25 lacks durable replay state for Nextcloud Talk webhook events, allowing valid signed requests to be replayed. Attackers can capture and replay previously valid signed webhook requests to trigger duplicate inbound processing and cause integrity or availability issues...

Nextcloud: Mail contact autocomplete bypasses administrator-configured user enumeration restrictions and expose member information outside the intended scope

A vulnerability was discovered in the Mail contact autocomplete feature of Nextcloud that allowed an authenticated user to bypass administrator-configured user enumeration restrictions and expose member information outside the intended scope. The vulnerability was present in the...

GHSA-866C-WWM5-4RJ7 Duplicate Advisory: OpenClaw's Nextcloud Talk webhook replay could trigger duplicate inbound processing

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-r9q5-c7qc-p26w. This link is maintained to preserve external references. Original Description OpenClaw versions prior to 2026.2.25 lack durable replay state for Nextcloud Talk webhook events, allowing valid sign...

Duplicate Advisory: OpenClaw's Nextcloud Talk webhook replay could trigger duplicate inbound processing

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-r9q5-c7qc-p26w. This link is maintained to preserve external references. Original Description OpenClaw versions prior to 2026.2.25 lack durable replay state for Nextcloud Talk webhook events, allowing valid sign...

CVE-2026-28449

OpenClaw versions prior to 2026.2.25 lack durable replay state for Nextcloud Talk webhook events, allowing valid signed webhook requests to be replayed without suppression. Attackers can capture and replay previously valid signed webhook requests to trigger duplicate inbound message processing an...

CVE-2026-28449 OpenClaw < 2026.2.25 - Webhook Replay Attack via Missing Durable Replay Suppression

OpenClaw versions prior to 2026.2.25 lack durable replay state for Nextcloud Talk webhook events, allowing valid signed webhook requests to be replayed without suppression. Attackers can capture and replay previously valid signed webhook requests to trigger duplicate inbound message processing an...

CVE-2026-28449

OpenClaw versions prior to 2026.2.25 are affected by a missing durable replay suppression for Nextcloud Talk webhook events. This allows valid signed webhook requests to be replayed, triggering duplicate inbound message processing and potentially impacting integrity and availability. The vulnerab...

EUVD-2026-13011

OpenClaw versions prior to 2026.2.25 lack durable replay state for Nextcloud Talk webhook events, allowing valid signed webhook requests to be replayed without suppression. Attackers can capture and replay previously valid signed webhook requests to trigger duplicate inbound message processing an...

CVE-2026-28449

OpenClaw versions prior to 2026.2.25 lack durable replay state for Nextcloud Talk webhook events, allowing valid signed webhook requests to be replayed without suppression. Attackers can capture and replay previously valid signed webhook requests to trigger duplicate inbound message processing an...

CVE-2026-28449 OpenClaw < 2026.2.25 - Webhook Replay Attack via Missing Durable Replay Suppression

OpenClaw versions prior to 2026.2.25 lack durable replay state for Nextcloud Talk webhook events, allowing valid signed webhook requests to be replayed without suppression. Attackers can capture and replay previously valid signed webhook requests to trigger duplicate inbound message processing an...

CVE-2026-28449 OpenClaw < 2026.2.25 - Webhook Replay Attack via Missing Durable Replay Suppression

OpenClaw versions prior to 2026.2.25 lack durable replay state for Nextcloud Talk webhook events, allowing valid signed webhook requests to be replayed without suppression. Attackers can capture and replay previously valid signed webhook requests to trigger duplicate inbound message processing an...

OpenClaw 安全漏洞

OpenClaw is an open-source intelligent artificial assistant developed by OpenClaw. Versions of OpenClaw prior to 2026.2.25 contained security vulnerabilities. These vulnerabilities stemmed from a lack of persistent replay protection for Nextcloud Talk webhook events. This allowed attackers to...

CVE-2026-28449: Authentication Bypass by Capture-replay

OpenClaw versions prior to 2026.2.25 lack durable replay state for Nextcloud Talk webhook events, allowing valid signed webhook requests to be replayed without suppression. Attackers can capture and replay previously valid signed webhook requests to trigger duplicate inbound message processing an...

The vulnerability of cloud-based software for creating and using Nextcloud Server and Nextcloud Enterprise Server lies in security configuration errors, which allow attackers to compromise the accessibility of protected information.

The vulnerability of cloud-based software for creating and using Nextcloud Server and Nextcloud Enterprise Server is related to security configuration errors. Exploiting this vulnerability can allow an attacker to compromise the accessibility of protected information...

The vulnerability of the Nextcloud Calendar application, a cloud-based software for creating and using Nextcloud data storage, relates to the use of insufficiently random values. This vulnerability allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Nextcloud Calendar application, a cloud-based software for creating and managing Nextcloud data storage, is related to the use of insufficiently random values. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the...

The vulnerability of the Nextcloud Contacts application, a cloud-based software for creating and using a Nextcloud data storage system, stems from the lack of protective measures taken for the web page structure. This allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Nextcloud Contacts application, a cloud-based software for creating and using Nextcloud data storage, is related to the lack of protective measures for the website structure. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and...

The vulnerability of cloud-based software for creating and using Nextcloud Server and Nextcloud Enterprise Server lies in the lack of access control measures, allowing attackers to gain unauthorized access to user accounts.

The vulnerability of cloud-based software for creating and using Nextcloud Server and Nextcloud Enterprise Server is related to deficiencies in restricting access to personal information. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to user accounts...

The vulnerability of the NextCloud Calendar application, a cloud-based software for creating and using NextCloud data storage, stems from improper handling of unexpected data types. This vulnerability allows attackers to compromise the integrity of the protected information.

The vulnerability of the Nextcloud Calendar application, a cloud-based software for creating and managing Nextcloud data storage, is related to improper handling of unexpected data types. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected informatio...

The vulnerability of cloud-based software for creating and using Nextcloud Server and Nextcloud Enterprise Server lies in the ability to bypass authentication via a user-controlled key, allowing attackers to compromise the integrity of protected information.

The vulnerability of cloud-based software for creating and using Nextcloud Server and Nextcloud Enterprise Server relates to bypassing authentication via a key controlled by the user. Exploiting this vulnerability allows an attacker to potentially compromise the integrity of protected information...