CVE-2026-55499

CVE-2026-55499 (Cloudreve) Prior to version 4.17.0, an authenticated recipient of a single-file share can receive real-time events for files in the owner’s parent folder, not just the shared item. The mechanism subscribes to the owner’s parent ID for a single-file share root, and the event hub fa...

Nextcloud: Predictable Random Number Generator

Description: The mobile application uses a predictable Random Number Generator RNG. Under certain conditions this weakness may jeopardize mobile application data encryption or other protection based on randomization. For example, if encryption tokens are generated inside of the application and an...