6211 matches found
[SECURITY] Fedora 44 Update: nextcloud-34.0.3-1.fc44
NextCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing rig ht on the web. NextCloud is extendable via a simple but powerful API...
PT-2026-81391
Name of the Vulnerable Software and Affected Versions Nextcloud MCP Server versions prior to 0.117.2 Description The POST /webhooks/nextcloud endpoint lacks authentication by default because the WEBHOOK SECRET variable defaults to None and is not required during startup validation. When this secr...
CVE-2026-55640: Missing Authentication for Critical Function
Nextcloud MCP Server is a production-ready MCP server that connects AI assistants to a Nextcloud instance. Prior to 0.117.2, the POST /webhooks/nextcloud endpoint in nextcloudmcpserver/vector/webhookreceiver.py has no authentication by default because WEBHOOKSECRET defaults to None and startup...
Fedora 43 : nextcloud (2026-625cbe86c8)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-625cbe86c8 advisory. 34.0.3 Release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...
Fedora 44 : nextcloud (2026-a1368a72b4)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-a1368a72b4 advisory. 34.0.3 Release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...
GHSA-PCW8-M77R-2528 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
GHSA-PCW8-M77R-2528 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
CVE-2026-73646 vulnerabilities
Vulnerabilities for packages: keep-fips, arangodb, authentik-fips, langfuse, langfuse-fips, semaphore, unleash-fips, librechat, cadence-web, unleash, vitess, commercial-gitlab-rails-ee, homepage, keep, jupyter-base-notebook, tensorflow-gpu-jupyter, jitsucom-jitsu, pelias-api, authentik,...
CVE-2026-73646 vulnerabilities
Vulnerabilities for packages: vitess, jitsucom-jitsu, langfuse, jupyter-base-notebook, nextcloud-server...
GHSA-55Q2-FJHQ-7XH7 vulnerabilities
Vulnerabilities for packages: langfuse, jupyter-base-notebook, nextcloud-server...
GHSA-38GX-CFQF-F652 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, awx, langfuse, prism, jitsucom-jitsu, langfuse-fips, lerna, semaphore, kubeflow-centraldashboard, librechat, wazuh-dashboard, kibana, wazuh-dashboard-fips, redisinsight, nextcloud-server, opensearch-dashboards...
CVE-2026-67314 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, awx, langfuse, opensearch-dashboards, prism, jitsucom-jitsu, langfuse-fips, lerna, semaphore, kubeflow-centraldashboard, librechat, wazuh-dashboard, kibana, wazuh-dashboard-fips, gitlab-rails-ce, redisinsight, nextcloud-server,...
GHSA-38GX-CFQF-F652 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, jitsucom-jitsu, langfuse, kubeflow-centraldashboard, lerna, nextcloud-server, prism...
CVE-2026-67314 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, jitsucom-jitsu, langfuse, kubeflow-centraldashboard, lerna, nextcloud-server, prism...
CVE-2026-69153 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, keep-fips, arangodb, authentik-fips, langfuse, langfuse-fips, semaphore, cadence-web, vitess, commercial-gitlab-rails-ee, keep, jupyter-base-notebook, tensorflow-gpu-jupyter, pelias-api, authentik, renovate, saf, gitlab-rails-ce, nextcloud-server,...
GHSA-FXQJ-RQCC-2CMP vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, keep-fips, arangodb, authentik-fips, langfuse, langfuse-fips, semaphore, cadence-web, vitess, commercial-gitlab-rails-ee, keep, jupyter-base-notebook, tensorflow-gpu-jupyter, pelias-api, authentik, renovate, saf, gitlab-rails-ce, nextcloud-server,...
CVE-2026-69153 vulnerabilities
Vulnerabilities for packages: vitess, kubeflow-pipelines, saf, langfuse, renovate, jupyter-base-notebook, nextcloud-server...
GHSA-FXQJ-RQCC-2CMP vulnerabilities
Vulnerabilities for packages: vitess, kubeflow-pipelines, saf, langfuse, renovate, jupyter-base-notebook, nextcloud-server...