Login Request a demo
UO
Product
User Oidc
by Nextcloud · last CVE Jun 1, 2026
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 1High 2Medium 6Low 0
Severity
All severities9Critical1High2Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add User Oidc to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-32074
9.8
1%
May 25
user_oidc app is an OpenID Connect user backend for Nextcloud
Affected: before 1.3.2
CVE-2026-45284
8.8
0%
Jun 1
Nextcloud: Wrong condition in the User OIDC app's LdapService allowed deleted LDAP users to authenticate
Affected: 1.3.6 before 8.4.0
CVE-2023-39954
8.1
0%
Aug 10
user_oidc provides the OIDC connect user backend for Nextcloud, an open-source cloud platform
Affected: 1.0.0 before 1.3.3
CVE-2024-37312
6.3
1%
Jun 14
user_oidc app is an OpenID Connect user backend for Nextcloud
Affected: before 5.0.0
CVE-2026-45278
6.1
0%
Jun 1
Nextcloud: Open Redirect in user_oidc login flow via protocol-relative URL bypass
Affected: 6.1.0 before 8.2.2
CVE-2024-52512
6.1
0%
Nov 15
user_oidc app is an OpenID Connect user backend for Nextcloud
Affected: 6.0.0 before 6.1.0
CVE-2023-28848
5.4
0%
Apr 4
user_oidc is the OIDC connect user backend for Nextcloud, an open source collaboration platform
Affected: 1.0.0 before 1.3.0
CVE-2023-39953
4.8
1%
Aug 10
user_oidc provides the OIDC connect user backend for Nextcloud, an open-source cloud platform
Affected: 1.0.0 before 1.3.3
CVE-2024-37886
4.7
0%
Jun 14
user_oidc app is an OpenID Connect user backend for Nextcloud
Affected: before 1.3.5
Showing 9