CVE-2026-32935 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-94G3-G5V7-Q4JG vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-27QH-8CXX-2CR5 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-R854-JRXH-36QX vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-40194 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-32935 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-46FQ-V4PG-GR3J vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-X92J-G74P-P2HQ vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-QQC2-7F54-R7WP vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-QQC2-7F54-R7WP vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-X92J-G74P-P2HQ vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-46FQ-V4PG-GR3J vulnerabilities

Vulnerabilities for packages: nextcloud-server...

Nextcloud: Path Traversal in Nextcloud Talk Android Exposes User Credentials and Private Data via FileProvider

A vulnerability in Nextcloud Talk Android allowed an external Android app to write and retrieve config files by pinging an internal endpoint...

Nextcloud: Critical broken access control: API-only delegated admin can enumerate all Team Folders and grant access to arbitrary groups

A critical broken access control vulnerability was discovered in the Team Folders application. An API-only delegated administrator was able to bypass folder-level authorization and grant access to arbitrary groups through an unprotected endpoint. Folder IDs were found to be predictable through...

Duplicate Advisory: OpenClaw: Nextcloud Talk room allowlist matched colliding room names instead of stable room tokens

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-xhq5-45pm-2gjr. This link is maintained to preserve external references. Original Description OpenClaw before 2026.3.22 contains a policy confusion vulnerability in room authorization that matches colliding room...

GHSA-5F7H-P83X-5VC2 Duplicate Advisory: OpenClaw: Nextcloud Talk room allowlist matched colliding room names instead of stable room tokens

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-xhq5-45pm-2gjr. This link is maintained to preserve external references. Original Description OpenClaw before 2026.3.22 contains a policy confusion vulnerability in room authorization that matches colliding room...

EUVD-2026-21106

OpenClaw before 2026.3.22 contains a policy confusion vulnerability in room authorization that matches colliding room names instead of stable room tokens. Attackers can exploit similarly named rooms to bypass allowlist policies and gain unauthorized access to protected Nextcloud Talk rooms...

CVE-2026-35624

OpenClaw before 2026.3.22 contains a policy confusion vulnerability in room authorization that matches colliding room names instead of stable room tokens. Attackers can exploit similarly named rooms to bypass allowlist policies and gain unauthorized access to protected Nextcloud Talk rooms...

CVE-2026-35624

OpenClaw before 2026.3.22 contains a policy confusion vulnerability in room authorization that matches colliding room names instead of stable room tokens. Attackers can exploit similarly named rooms to bypass allowlist policies and gain unauthorized access to protected Nextcloud Talk rooms. Affec...

CVE-2026-35624 OpenClaw < 2026.3.22 - Policy Confusion via Room Name Collision in Nextcloud Talk

OpenClaw before 2026.3.22 contains a policy confusion vulnerability in room authorization that matches colliding room names instead of stable room tokens. Attackers can exploit similarly named rooms to bypass allowlist policies and gain unauthorized access to protected Nextcloud Talk rooms...