SE
Product
security-advisories
53
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 38Low 9
Watch
Add security-advisories to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-45284 | 8.8 | Jun 1 | Nextcloud: Wrong condition in the User OIDC app's LdapService allowed deleted LDAP users to authenticate Affected: >= 1.3.6, < 8.4.0 |
| CVE-2026-45545 | 8.2 | Jun 1 | Nextcloud: SQL Injection in Column Type Parameter Allows Arbitrary SQL Execution Affected: >= 0.7.0, < 0.7.7; >= 0.8.0, < 0.8.10; >= 0.9.0, < 0.9.8; >= 1.0.0, < 1.0.4 |
| CVE-2026-45281 | 8.1 | Jun 1 | Nextcloud: Cross-Account Calendar Takeover via Unauthorized Group-Member-Set Update Affected: >= 32.0.0, < 32.0.9; >= 33.0.0, < 33.0.3 |
| CVE-2026-45156 | 8.1 | Jun 1 | Nextcloud: Authentication Bypass in ID4me handling via Missing JWT Signature Verification in User OIDC Affected: >= 0.3.0, < 3.1.0; >= 5.0.0, < 5.1.0; >= 6.0.0, < 6.4.0 |
| CVE-2026-45722 | 7.1 | Jun 1 | Nextcloud: Tables app allows limited SQLi in ORDER BY with malicious sort order argument for Table Views Affected: >= 0.9.0, < 0.9.7; >= 1.0.0, < 1.0.2 |
Showing 5