Skip to content
Threat Feed
Subscribe

Vendor

Nextcloud

4 briefs RSS
low advisory

Remote Code Execution Vulnerability in Nextcloud

A critical vulnerability in Nextcloud Hub, tracked as CVE-2024-28112, allows remote attackers to execute arbitrary code on the underlying application server.

Nextcloud Hub web-application vulnerability rce
2t 1c
critical advisory

Unauthenticated Vector Data Deletion in nextcloud-mcp-server via CVE-2026-55640

An unauthenticated remote attacker can delete or corrupt semantic search vector embeddings in Qdrant by sending a crafted POST request to the /webhooks/nextcloud endpoint due to missing default authentication.

nextcloud-mcp-server
1r 1t 1c
medium advisory

Multiple Vulnerabilities in Nextcloud Products

Multiple vulnerabilities, including CVE-2026-61527 and CVE-2026-61545, affect Nextcloud Server and Mail components, posing risks to data confidentiality and security policy enforcement.

Nextcloud Server 32 +4 vulnerability nextcloud patch-management
high advisory

Multiple Vulnerabilities in Nextcloud Products

Multiple vulnerabilities in Nextcloud products can lead to data confidentiality breaches, data integrity compromise, and security policy bypass.

PoC Android Files +7 nextcloud vulnerability security-policy-bypass
2r 5c 6i updated