SE
Product
server
9
CVEs
0
On KEV
7.5
Max CVSS
3
New 30D
Severity mix
Critical 0High 1Medium 7Low 1
Watch
Add server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-77167 New | 7.5 | Oct 27 | Abusing the federated share endpoint, an attacker can write arbitrary rows into the oc_share_external database table Affected: 22.0.0 through 34.0.0 |
| CVE-2026-77165 | 6.5 | Sep 21 | File owners were unable to unlock TYPE_TOKEN locks placed by other users, leaving files permanently locked with no recovery path outside of the database Affected: 32.0.0 through 34.0.0 |
| CVE-2026-82985 | 6.5 | Sep 18 | The Photos app's filter-based "smart albums" build their file listing using the search configuration (photosSourceFolders) of the user viewing the album, rather than the album… Affected: 32.0.0 before 32.0.0 |
| CVE-2021-41179 | 6.5 | Oct 25 | Nextcloud is an open-source, self-hosted productivity platform Affected: 20.0.3 before 20.0.13; 21.0.1 before 21.0.5; 22.1.1 before 22.2.0 |
| CVE-2021-41178 | 6.5 | Oct 25 | Nextcloud is an open-source, self-hosted productivity platform Affected: 20.0.3 before 20.0.13; 21.0.1 before 21.0.5; 22.1.1 before 22.2.0 |
| CVE-2026-77164 | 6.2 | Sep 18 | Circles' remote-instance signature verification fetches the attacker-supplied keyId URL before trust in the remote instance is established, and explicitly allows local/private… Affected: 31.0.0 through 32.0.0 |
| CVE-2026-77172 New | 5.3 | Oct 27 | App passwords were allowed to bypass password confirmation on sensitive endpoints Affected: 32.0.0 through 34.0.0 |
| CVE-2026-82984 New | 4.3 | Oct 27 | When a team was configured as "visible to everyone", the web UI correctly blocked non-members from viewing the team ("You are not a member of ..."), but the resources API endpoint… Affected: 32.0.0 through 33.0.0 |
| CVE-2026-68493 | 3.1 | Sep 18 | After guessing a 62^15 complex unique identifier, a malicious logged in user was able to retrieve a list of memberships for a circle they are not a member of Affected: 32.0.0 through 34.0.0 |
Showing 9
