Login Request a demo
NE
Product
nextcloud/server
by NextCloud · last CVE Jun 1, 2026
189
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities189In the news0Timeline
Severity mix
Critical 7High 42Medium 125Low 15
Severity
All severities189Critical7High42Medium125Low15
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add nextcloud/server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-22403
3.7
0%
Jan 18
Nextcloud server is a self hosted personal cloud system
Affected: before 28.0.0
CVE-2024-52514
3.5
1%
Nov 15
Nextcloud Server is a self hosted personal cloud system
Affected: 21.0.0 before 21.0.9.18; 22.0.0 before 22.2.10.23; 23.0.0 before 23.0.12.18; 24.0.0 before 24.0.12.14; 25.0.0 before 25.0.13.9; 26.0.0 before 26.0.13.3; +4 more
CVE-2024-37887
3.5
0%
Jun 14
Nextcloud Server is a self hosted personal cloud system
Affected: 27.0.0 before 27.1.10; 27.0.0 before 27.1.10; 28.0.0 through 28.0.6; 28.0.0 before 28.0.6; 29.0.0; 29.0.0
CVE-2024-37314
3.5
0%
Jun 14
Nextcloud Photos is a photo management app
Affected: 25.0.0 before 25.0.7; 26.0.0 before 26.0.2
CVE-2022-31014
3.5
3%
Jul 5
Nextcloud server is an open source personal cloud server
Affected: before 19.0.13.7; before 22.2.8; 20.0.0 before 20.0.14.6; 21.0.0 before 21.0.9.5; 23.0.0 before 23.0.5; 24.0.0; +6 more
CVE-2021-32655
3.5
1%
Jun 1
Nextcloud Server is a Nextcloud package that handles data storage
Affected: before 19.0.11; 20.0.0 before 20.0.10; 21.0.0 before 21.0.2
CVE-2017-0895
3.5
1%
May 8
Nextcloud Server before 10.0.4 and 11.0.2 are vulnerable to disclosure of calendar and addressbook names to other logged-in users
Affected: 10.0.0 before 10.0.4; 11.0.0 before 11.0.2
CVE-2017-0892
3.5
1%
May 8
Nextcloud Server before 11.0.3 is vulnerable to an improper session handling allowed an application specific password without permission to the files access to the users file
Affected: before 11.0.3
CVE-2021-32680
3.3
0%
Jul 12
Nextcloud Server is a Nextcloud package that handles data storage
Affected: before 19.0.13; 20.0.0 before 20.0.11; 21.0.0 before 21.0.3
CVE-2018-16463
3.1
1%
Oct 30
A bug causing session fixation in Nextcloud Server prior to 14.0.0, 13.0.3 and 12.0.8 could potentially allow an attacker to obtain access to password protected shares
Affected: before 12.0.8; 13.0.0 before 13.0.3; 14.0.0; 14.0.0; 14.0.0; 14.0.0; +2 more
CVE-2023-48303
2.7
1%
Nov 21
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform
Affected: 25.0.0 before 25.0.11; 25.0.0 before 25.0.11; 26.0.0 before 26.0.6; 26.0.0 before 26.0.6; 27.0.0 before 27.1.0; 27.0.0 before 27.1.0
CVE-2022-41969
2.7
1%
Dec 1
Nextcloud Server is an open source personal cloud server
Affected: 23.0.0 before 23.0.11; 23.0.0 before 23.0.11; 24.0.0 before 24.0.7; 24.0.0 before 24.0.7
CVE-2022-31120
2.7
1%
Aug 4
Federated share accepting/declining is not logged in audit log in Nextcloud Server
Affected: before 22.2.7; 23.0.0 before 23.0.4
CVE-2021-32653
2.7
1%
Jun 1
Nextcloud Server is a Nextcloud package that handles data storage
Affected: before 19.0.11; 20.0.0 before 20.0.10; 21.0.0 before 21.0.2
CVE-2020-8173
2.2
0%
Nov 2
A too small set of random characters being used for encryption in Nextcloud Server 18.0.4 allowed decryption in shorter time than intended
Affected: before 17.0.7; 18.0.0 before 18.0.5
Showing 15