Advisories · Technology

Nextcloud Server.

Every CVE that names Nextcloud Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-82984 CVE record

CVSS 4.3 Medium

Improper access control in Nextcloud Server
- Nextcloud Server
- Broken access control
Not analysed yet 27 Oct 2026
CVE-2026-77167 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Nextcloud server
- Nextcloud server
- Denial of service
Not analysed yet 27 Oct 2026
CVE-2026-77172 CVE record

CVSS 5.3 Medium

Improper privilege management in Nextcloud Server
- Nextcloud Server
- Privilege escalation
Not analysed yet 27 Oct 2026
CVE-2026-77165 CVE record

CVSS 6.5 Medium

Improper access control in Nextcloud Server
- Nextcloud Server
- Broken access control
Not analysed yet 21 Sept 2026
CVE-2026-68493 CVE record

CVSS 3.1 Low

Insecure direct object reference in Nextcloud Server
- Nextcloud Server
- Broken access control
Not analysed yet 18 Sept 2026
CVE-2026-82985 CVE record

CVSS 6.5 Medium

Improper access control in Nextcloud Server
- Nextcloud Server
- Broken access control
Not analysed yet 18 Sept 2026
CVE-2026-77164 CVE record

CVSS 6.2 Medium

Server-side request forgery in Nextcloud Server
- Nextcloud Server
- Server-side request forgery (SSRF)
Not analysed yet 18 Sept 2026
CVE-2021-22915 CVE record

Unlimited authentication attempts in Nextcloud Server
- Nextcloud Server
- Authentication bypass
Not analysed yet 11 Jun 2021
CVE-2020-8296 CVE record

Nextcloud Server: Nextcloud Server prior to 20.0.0 stores passwords in a recoverable format even when…
- Nextcloud Server
- CWE-257
Not analysed yet 3 Mar 2021
CVE-2021-22878 CVE record

Cross-site scripting in Nextcloud Server
- Nextcloud Server
- Cross-site scripting (XSS)
Not analysed yet 3 Mar 2021
CVE-2021-22877 CVE record

Improper access control in Nextcloud Server
- Nextcloud Server
- Broken access control
Not analysed yet 3 Mar 2021
CVE-2020-8294 CVE record

Cross-site scripting in Nextcloud Server
- Nextcloud Server
- Cross-site scripting (XSS)
Not analysed yet 3 Feb 2021
CVE-2020-8295 CVE record

Uncontrolled resource consumption in Nextcloud Server
- Nextcloud Server
- Denial of service
Not analysed yet 26 Jan 2021
CVE-2020-8293 CVE record

Uncontrolled resource consumption in Nextcloud Server
- Nextcloud Server
- Denial of service
Not analysed yet 26 Jan 2021
CVE-2020-8259 CVE record

Insufficiently protected credentials in Nextcloud Server
- Nextcloud Server
- Hard-coded credentials
Not analysed yet 16 Nov 2020
CVE-2020-8152 CVE record

Insufficiently protected credentials in Nextcloud Server
- Nextcloud Server
- Hard-coded credentials
Not analysed yet 16 Nov 2020
CVE-2020-8133 CVE record

Nextcloud Server: A wrong generation of the passphrase for the encrypted block in Nextcloud Server 19.0.1…
- Nextcloud Server
- CWE-657
Not analysed yet 9 Nov 2020
CVE-2020-8150 CVE record

Nextcloud Server: A cryptographic issue in Nextcloud Server 19.0.1 allowed an attacker to downgrade the…
- Nextcloud Server
- CWE-310
Not analysed yet 9 Nov 2020
CVE-2020-8183 CVE record

Plaintext password storage in Nextcloud Server
- Nextcloud Server
- CWE-256
Not analysed yet 30 Oct 2020
CVE-2020-8173 CVE record

Nextcloud Server: A too small set of random characters being used for encryption in Nextcloud Server 18.0.4…
- Nextcloud Server
- CWE-310
Not analysed yet 30 Oct 2020
CVE-2020-8236 CVE record

Improper authentication in Nextcloud Server
- Nextcloud Server
- Authentication bypass
Not analysed yet 30 Oct 2020
CVE-2020-8223 CVE record

Improper privilege management in Nextcloud Server
- Nextcloud Server
- Privilege escalation
Not analysed yet 5 Oct 2020
CVE-2020-8155 CVE record

Cross-site scripting in Nextcloud Server
- Nextcloud Server
- Cross-site scripting (XSS)
Not analysed yet 12 May 2020
CVE-2020-8154 CVE record

Insecure direct object reference in Nextcloud Server
- Nextcloud Server
- Broken access control
Not analysed yet 12 May 2020
CVE-2020-8139 CVE record

Improper access control in Nextcloud Server
- Nextcloud Server
- Broken access control
Not analysed yet 20 Mar 2020
CVE-2020-8138 CVE record

Server-side request forgery in Nextcloud Server
- Nextcloud Server
- Server-side request forgery (SSRF)
Not analysed yet 20 Mar 2020
CVE-2020-8122 CVE record

Improper access control in Nextcloud server
- Nextcloud server
- Broken access control
Not analysed yet 4 Feb 2020
CVE-2020-8121 CVE record

Improper access control in Nextcloud Server
- Nextcloud Server
- Broken access control
Not analysed yet 4 Feb 2020
CVE-2020-8120 CVE record

Cross-site scripting in Nextcloud Server
- Nextcloud Server
- Cross-site scripting (XSS)
Not analysed yet 4 Feb 2020
CVE-2020-8119 CVE record

Improper authorization in Nextcloud Server
- Nextcloud Server
- Broken access control
Not analysed yet 4 Feb 2020
CVE-2020-8118 CVE record

Server-side request forgery in Nextcloud Server
- Nextcloud Server
- Server-side request forgery (SSRF)
Not analysed yet 4 Feb 2020
CVE-2020-8117 CVE record

Nextcloud Server: Improper preservation of permissions in Nextcloud Server 14.0.3 causes the event details…
- Nextcloud Server
- CWE-280
Not analysed yet 4 Feb 2020
CVE-2019-15624 CVE record

Nextcloud Server: Improper Input Validation in Nextcloud Server 15.0.7 allows group admins to create users…
- Nextcloud Server
Not analysed yet 4 Feb 2020
CVE-2019-15623 CVE record

Exposure of personal information in Nextcloud Server
- Nextcloud Server
- Information disclosure
Not analysed yet 4 Feb 2020
CVE-2019-15621 CVE record

Nextcloud Server: Improper permissions preservation in Nextcloud Server 16.0.1 causes sharees to be able to…
- Nextcloud Server
Not analysed yet 4 Feb 2020
CVE-2019-15619 CVE record

Cross-site scripting in Nextcloud Server
- Nextcloud Server
- Cross-site scripting (XSS)
Not analysed yet 4 Feb 2020
CVE-2019-15618 CVE record

Cross-site scripting in Nextcloud Server
- Nextcloud Server
- Cross-site scripting (XSS)
Not analysed yet 4 Feb 2020
CVE-2019-15617 CVE record

Improper authentication in Nextcloud Server
- Nextcloud Server
- Authentication bypass
Not analysed yet 4 Feb 2020
CVE-2019-15616 CVE record

CRLF injection in Nextcloud Server
- Nextcloud Server
- Other injection
Not analysed yet 4 Feb 2020
CVE-2019-15613 CVE record

Improper input validation in Nextcloud Server
- Nextcloud Server
- CWE-20
Not analysed yet 4 Feb 2020
CVE-2019-15612 CVE record

Session fixation in Nextcloud Server
- Nextcloud Server
- Authentication bypass
Not analysed yet 4 Feb 2020
CVE-2019-5449 CVE record

Improper authentication in Nextcloud Server
- Nextcloud Server
- Authentication bypass
Not analysed yet 30 Jul 2019
CVE-2018-16467 CVE record

Information disclosure in Nextcloud Server
- Nextcloud Server
- Information disclosure
Not analysed yet 30 Oct 2018
CVE-2018-16466 CVE record

Improper access control in Nextcloud Server
- Nextcloud Server
- Broken access control
Not analysed yet 30 Oct 2018
CVE-2018-16465 CVE record

Improper authentication in Nextcloud Server
- Nextcloud Server
- Authentication bypass
Not analysed yet 30 Oct 2018
CVE-2018-16464 CVE record

Improper authentication in Nextcloud Server
- Nextcloud Server
- Authentication bypass
Not analysed yet 30 Oct 2018
CVE-2018-16463 CVE record

Session fixation in Nextcloud Server
- Nextcloud Server
- Authentication bypass
Not analysed yet 30 Oct 2018
CVE-2018-3780 CVE record

Cross-site scripting in nextcloud/server
- nextcloud/server
- Cross-site scripting (XSS)
Not analysed yet 13 Aug 2018
CVE-2018-3762 CVE record

Improper access control in Nextcloud Server
- Nextcloud Server
- Broken access control
Not analysed yet 5 Jul 2018
CVE-2018-3761 CVE record

Improper authentication in Nextcloud Server
- Nextcloud Server
- Authentication bypass
Not analysed yet 5 Jul 2018
CVE-2017-0936 CVE record

Insecure direct object reference in Nextcloud Server
- Nextcloud Server
- Broken access control
Not analysed yet 28 Mar 2018
CVE-2017-0895 CVE record

Improper authorization in Nextcloud Server
- Nextcloud Server
- Broken access control
Not analysed yet 8 May 2017
CVE-2017-0894 CVE record

Improper authorization in Nextcloud Server
- Nextcloud Server
- Broken access control
Not analysed yet 8 May 2017
CVE-2017-0893 CVE record

Cross-site scripting in Nextcloud Server
- Nextcloud Server
- Cross-site scripting (XSS)
Not analysed yet 8 May 2017
CVE-2017-0892 CVE record

Improper authorization in Nextcloud Server
- Nextcloud Server
- Broken access control
Not analysed yet 8 May 2017
CVE-2017-0891 CVE record

Cross-site scripting in Nextcloud Server
- Nextcloud Server
- Cross-site scripting (XSS)
Not analysed yet 8 May 2017
CVE-2017-0890 CVE record

Cross-site scripting in Nextcloud Server
- Nextcloud Server
- Cross-site scripting (XSS)
Not analysed yet 8 May 2017
CVE-2017-0888 CVE record

Nextcloud Server: Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Content-Spoofing vulnerability…
- Nextcloud Server
- CWE-451
Not analysed yet 5 Apr 2017
CVE-2017-0887 CVE record

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a bypass in the quota limitation.
- Nextcloud Server
- CWE-807
Not analysed yet 5 Apr 2017
CVE-2017-0886 CVE record

Uncontrolled recursion in Nextcloud Server
- Nextcloud Server
- Denial of service
Not analysed yet 5 Apr 2017