SE
Product
server
9
CVEs
0
On KEV
7.5
Max CVSS
3
New 30D
Severity mix
Critical 0High 1Medium 7Low 1
Watch
Add server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-77165 | 6.5 | Sep 21 | File owners were unable to unlock TYPE_TOKEN locks placed by other users, leaving files permanently locked with no recovery path outside of the database Affected: 32.0.0 through 34.0.0 |
| CVE-2026-82985 | 6.5 | Sep 18 | The Photos app's filter-based "smart albums" build their file listing using the search configuration (photosSourceFolders) of the user viewing the album, rather than the album… Affected: 32.0.0 before 32.0.0 |
| CVE-2021-41179 | 6.5 | Oct 25 | Nextcloud is an open-source, self-hosted productivity platform Affected: 20.0.3 before 20.0.13; 21.0.1 before 21.0.5; 22.1.1 before 22.2.0 |
| CVE-2021-41178 | 6.5 | Oct 25 | Nextcloud is an open-source, self-hosted productivity platform Affected: 20.0.3 before 20.0.13; 21.0.1 before 21.0.5; 22.1.1 before 22.2.0 |
| CVE-2026-77164 | 6.2 | Sep 18 | Circles' remote-instance signature verification fetches the attacker-supplied keyId URL before trust in the remote instance is established, and explicitly allows local/private… Affected: 31.0.0 through 32.0.0 |
| CVE-2026-77172 New | 5.3 | Oct 27 | App passwords were allowed to bypass password confirmation on sensitive endpoints Affected: 32.0.0 through 34.0.0 |
| CVE-2026-82984 New | 4.3 | Oct 27 | When a team was configured as "visible to everyone", the web UI correctly blocked non-members from viewing the team ("You are not a member of ..."), but the resources API endpoint… Affected: 32.0.0 through 33.0.0 |
Showing 7