CVE-2026-101909 vulnerabilities

Vulnerabilities for packages: langfuse, kubeflow-centraldashboard, nextcloud-server, opensearch-dashboards, prism, lerna...

CVE-2026-101905 vulnerabilities

Vulnerabilities for packages: langfuse, kubeflow-centraldashboard, nextcloud-server, opensearch-dashboards, prism, lerna...

CVE-2026-101902 vulnerabilities

Vulnerabilities for packages: langfuse, kubeflow-centraldashboard, nextcloud-server, opensearch-dashboards, prism, lerna...

CVE-2026-101899 vulnerabilities

Vulnerabilities for packages: langfuse, kubeflow-centraldashboard, nextcloud-server, opensearch-dashboards, prism, lerna...

CVE-2026-101908 vulnerabilities

Vulnerabilities for packages: langfuse, kubeflow-centraldashboard, nextcloud-server, opensearch-dashboards, prism, lerna...

CVE-2026-101898 vulnerabilities

Vulnerabilities for packages: langfuse, kubeflow-centraldashboard, nextcloud-server, opensearch-dashboards, prism, lerna...

CVE-2026-101900 vulnerabilities

Vulnerabilities for packages: langfuse, kubeflow-centraldashboard, nextcloud-server, opensearch-dashboards, prism, lerna...

GHSA-4P3W-J4W9-5JQW vulnerabilities

Vulnerabilities for packages: kibana, py3-jupyterhub, wazuh-dashboard, sqlpad, opensearch-dashboards-fips, wazuh-dashboard-fips, arangodb, azurite, opensearch-dashboards, librechat, nextcloud-server, kubeflow-centraldashboard...

CVE-2026-17495 vulnerabilities

Vulnerabilities for packages: kibana, py3-jupyterhub, wazuh-dashboard, sqlpad, opensearch-dashboards-fips, wazuh-dashboard-fips, arangodb, azurite, opensearch-dashboards, librechat, nextcloud-server, kubeflow-centraldashboard...

[SECURITY] Fedora 43 Update: nextcloud-34.0.4-1.fc43

NextCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing rig ht on the web. NextCloud is extendable via a simple but powerful API...

[SECURITY] Fedora 44 Update: nextcloud-34.0.4-1.fc44

NextCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing rig ht on the web. NextCloud is extendable via a simple but powerful API...

[SECURITY] Fedora 45 Update: nextcloud-34.0.4-1.fc45

NextCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing rig ht on the web. NextCloud is extendable via a simple but powerful API...

Fedora 44 : nextcloud (2026-362f1943c8)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-362f1943c8 advisory. 34.0.4 Release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Fedora 43 : nextcloud (2026-c495e95154)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c495e95154 advisory. 34.0.4 Release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Fedora 45 : nextcloud (2026-5c1bbb46c3)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-5c1bbb46c3 advisory. 34.0.4 Release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Exploit for CVE-2026-52782

abraxaslabs.tech · github.com/abraxas ·&...

BIT-NEXTCLOUD-2026-82985

The Photos app's filter-based "smart albums" build their file listing using the search configuration photosSourceFolders of the user viewing the album, rather than the album owner's configuration. When an album owner shares a smart album with another user, that user's own folder configuration is...

BIT-NEXTCLOUD-2026-77164

Circles' remote-instance signature verification fetches the attacker-supplied keyId URL before trust in the remote instance is established, and explicitly allows local/private addresses for this request, bypassing Nextcloud's core SSRF protections. The public, unauthenticated endpoints POST...

BIT-NEXTCLOUD-2026-68493

After guessing a 62^15 complex unique identifier, a malicious logged in user was able to retrieve a list of memberships for a circle they are not a member of...

PT-2026-98999

Circles' remote-instance signature verification fetches the attacker-supplied keyId URL before trust in the remote instance is established, and explicitly allows local/private addresses for this request, bypassing Nextcloud's core SSRF protections. The public, unauthenticated endpoints POST...