6213 matches found
[SECURITY] Fedora 43 Update: nextcloud-34.0.3-1.fc43
NextCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing rig ht on the web. NextCloud is extendable via a simple but powerful API...
[SECURITY] Fedora 44 Update: nextcloud-34.0.3-1.fc44
NextCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing rig ht on the web. NextCloud is extendable via a simple but powerful API...
PT-2026-81391
Name of the Vulnerable Software and Affected Versions Nextcloud MCP Server versions prior to 0.117.2 Description The POST /webhooks/nextcloud endpoint lacks authentication by default because the WEBHOOK SECRET variable defaults to None and is not required during startup validation. When this secr...
CVE-2026-55640: Missing Authentication for Critical Function
Nextcloud MCP Server is a production-ready MCP server that connects AI assistants to a Nextcloud instance. Prior to 0.117.2, the POST /webhooks/nextcloud endpoint in nextcloudmcpserver/vector/webhookreceiver.py has no authentication by default because WEBHOOKSECRET defaults to None and startup...
Fedora 43 : nextcloud (2026-625cbe86c8)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-625cbe86c8 advisory. 34.0.3 Release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...
Fedora 44 : nextcloud (2026-a1368a72b4)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-a1368a72b4 advisory. 34.0.3 Release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...
GHSA-PCW8-M77R-2528 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
GHSA-PCW8-M77R-2528 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
CVE-2026-73646 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, keep-fips, jupyter-base-notebook, authentik, homepage, authentik-fips, tensorflow-gpu-jupyter, cadence-web, librechat, pelias-api, keep, semaphore, nextcloud-server, langfuse-fips, unleash, gitlab-rails-ce-fips, commercial-gitlab-rails-ee,...
CVE-2026-73646 vulnerabilities
Vulnerabilities for packages: langfuse, jupyter-base-notebook, jitsucom-jitsu, vitess, nextcloud-server...
GHSA-55Q2-FJHQ-7XH7 vulnerabilities
Vulnerabilities for packages: langfuse, jupyter-base-notebook, nextcloud-server...
GHSA-38GX-CFQF-F652 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, wazuh-dashboard, jitsucom-jitsu, kubeflow-centraldashboard, opensearch-dashboards, semaphore, nextcloud-server, wazuh-dashboard-fips, langfuse-fips, redisinsight, langfuse, awx, prism, lerna, librechat, kibana...
CVE-2026-67314 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, wazuh-dashboard, jitsucom-jitsu, gitlab-rails-ce, kubeflow-centraldashboard, opensearch-dashboards, nextcloud-server, semaphore, wazuh-dashboard-fips, langfuse-fips, redisinsight, gitlab-rails-ce-fips, langfuse, awx, prism, lerna, librecha...
GHSA-38GX-CFQF-F652 vulnerabilities
Vulnerabilities for packages: langfuse, prism, lerna, kubeflow-centraldashboard, opensearch-dashboards, jitsucom-jitsu, nextcloud-server...
CVE-2026-67314 vulnerabilities
Vulnerabilities for packages: langfuse, prism, lerna, kubeflow-centraldashboard, opensearch-dashboards, jitsucom-jitsu, nextcloud-server...
GHSA-FXQJ-RQCC-2CMP vulnerabilities
Vulnerabilities for packages: keep-fips, jupyter-base-notebook, authentik, authentik-fips, tensorflow-gpu-jupyter, cadence-web, kubeflow-pipelines, renovate, saf, pelias-api, keep, semaphore, nextcloud-server, langfuse-fips, gitlab-rails-ce-fips, commercial-gitlab-rails-ee,...
CVE-2026-69153 vulnerabilities
Vulnerabilities for packages: keep-fips, jupyter-base-notebook, authentik, authentik-fips, tensorflow-gpu-jupyter, cadence-web, kubeflow-pipelines, renovate, saf, pelias-api, keep, semaphore, nextcloud-server, langfuse-fips, gitlab-rails-ce-fips, commercial-gitlab-rails-ee,...
GHSA-FXQJ-RQCC-2CMP vulnerabilities
Vulnerabilities for packages: langfuse, jupyter-base-notebook, kubeflow-pipelines, saf, renovate, vitess, nextcloud-server...