Vulnerabilities in Nextcloud
306 resultsCVE-2026-82986MEDIUMThe user in a group can bypass the group restriction set by an administrator on link sharing, creating share links for a table even though tEPSS 0.2%CVE-2025-66548LOWNextcloud Deck app allows to spoof file extensions by using RTLO charactersEPSS 0.2%CVE-2026-45153MEDIUMNextcloud: PIN bypass in PassCodeActivity via back buttonEPSS 0.2%CVE-2025-66546LOWNextcloud Calendar app allowed booking appointments without the generated tokenEPSS 0.1%CVE-2026-45277LOWNextcloud: Information disclosure in Nextcloud Approval app via fileId parameter reveals workflow associationsEPSS 0.1%CVE-2026-82983LOWThe Tables app's share-listing endpoint (GET /apps/tables/share/table/{tableId}) did not verify that the requesting user has manage-level peEPSS 0.1%