{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/richdocuments-11.0.x--11.0.1--10.0.0--10.2.1--9.0.0--9.1.1/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"id":"CVE-2026-114601"},{"id":"CVE-2026-67400"},{"cvss":7.5,"id":"CVE-2026-77167"},{"cvss":3.5,"id":"CVE-2026-77171"},{"cvss":5.3,"id":"CVE-2026-77172"},{"cvss":4.3,"id":"CVE-2026-77173"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Nextcloud Server","Nextcloud Tables","Nextcloud Whiteboard","Nextcloud Files Confidential","Nextcloud Collectives","Nextcloud Richdocuments","Nextcloud Server Enterprise","Collectives (\u003e 4.0.0, \u003c 4.4.0)","Files Confidential (3.3.x \u003c 3.3.1, \u003e 4.0.0 \u003c 4.1.1, \u003e 5.0.0 \u003c 5.1.0)","Richdocuments (11.0.x \u003c 11.0.1, \u003e 10.0.0 \u003c 10.2.1, \u003e 9.0.0 \u003c 9.1.1)"],"_cs_severities":["medium"],"_cs_tags":["vulnerability","nextcloud","webserver"],"_cs_type":"advisory","_cs_vendors":["Nextcloud"],"content_html":"\u003cp\u003eNextcloud has issued a security advisory regarding multiple vulnerabilities affecting the Nextcloud Server core and several official applications: Tables, Whiteboard, Files Confidential, Collectives, and Richdocuments. Successful exploitation of these issues may allow an attacker to bypass security measures, access or modify sensitive data, or impact service availability via Denial-of-Service (DoS). Specific CVE identifiers were not provided in the source material. Users are advised to review the official Nextcloud advisory portal for specific version remediation details.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eImpact includes unauthorized data disclosure, data manipulation, security control bypass, and service disruption (DoS).\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInventory all Nextcloud instances and integrated applications, specifically Tables, Whiteboard, Files Confidential, Collectives, and Richdocuments.\u003c/li\u003e\n\u003cli\u003eReview the official Nextcloud security advisory portal to identify and apply the necessary patches for your specific versions.\u003c/li\u003e\n\u003cli\u003ePrioritize patching of internet-facing Nextcloud instances.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-27T17:39:09Z","date_published":"2026-10-27T17:34:27Z","id":"https://feed.craftedsignal.io/briefs/2026-10-nextcloud-multi-vuln/","summary":"Nextcloud disclosed multiple vulnerabilities across its server platform and various applications, including Tables, Whiteboard, Files Confidential, Collectives, and Richdocuments, which could allow attackers to bypass security controls, manipulate data, or cause Denial-of-Service.","title":"Nextcloud: Multiple vulnerabilities in Server and plugins","url":"https://feed.craftedsignal.io/briefs/2026-10-nextcloud-multi-vuln/"}],"language":"en","title":"CraftedSignal Threat Feed - Richdocuments (11.0.x \u003c 11.0.1, \u003e 10.0.0 \u003c 10.2.1, \u003e 9.0.0 \u003c 9.1.1)","version":"https://jsonfeed.org/version/1.1"}