en
Nextcloud is the organization behind a fully open-source content collaboration platform. It provides software for self-hosted or provider-hosted file synchronization, sharing, communication, and productivity workflows, with an emphasis on giving organizations and individuals control over data and infrastructure.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
As of 10/22/2026, Nextcloud recorded 9 security vulnerabilities in the last 90 days across 6 products, including 0 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Server had the most security vulnerabilities in the Nextcloud ecosystem, with 4 vulnerabilities—approximately 44.44% of the provider's total vulnerabilities during this period.
CVE-2026-45722Nextcloud: Tables app allows limited SQLi in ORDER BY with malicious sort order argument for Table ViewsCVE-2026-45691Nextcloud: Bypass of second factor authentication on DAV endpointsCVE-2026-45690Nextcloud: Two-Factor Authentication Bypass via Pending Session Token ReplayCVE-2026-45545Nextcloud: SQL Injection in Column Type Parameter Allows Arbitrary SQL ExecutionCVE-2026-45544Nextcloud: Information Disclosure of view filter metdata via Broken Sensitive Data Masking in ViewService394 Results | Page 2 of 40
| SeverityMedium |
| SeverityMedium |
| SeverityHigh |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |