Nextcloud — security vulnerabilities (CVEs)

Known CVE vulnerabilities affecting Nextcloud products, grouped by product. Select a product for the full CVE list with CVSS, EPSS, and CISA KEV signal.

Products (39)

• Nextcloud Server — 189 CVEs
• Nextcloud — 28 CVEs
• Desktop — 27 CVEs
• Talk — 20 CVEs
• Deck — 17 CVEs
• Mail — 15 CVEs
• Calendar — 10 CVEs
• User Oidc — 9 CVEs
• Richdocuments — 8 CVEs
• Tables — 8 CVEs
• Contacts — 7 CVEs
• Nextcloud Enterprise Server — 6 CVEs
• Approval — 3 CVEs
• Circles — 3 CVEs
• Group Folders — 3 CVEs
• End-to-end Encryption — 2 CVEs
• Guests — 2 CVEs
• Nextcloud Talk — 2 CVEs
• Notes — 2 CVEs
• Openid Connect User Backend — 2 CVEs
• Preferred Providers — 2 CVEs
• Server — 2 CVEs
• Social — 2 CVEs
• Cookbook — 1 CVEs
• Extract — 1 CVEs
• Files Access Control — 1 CVEs
• Flow — 1 CVEs
• Forms — 1 CVEs
• Global Site Selector — 1 CVEs
• Lookup-server — 1 CVEs
• News — 1 CVEs
• Nextcloud Files Automated Tagging — 1 CVEs
• Nextcloud Mail — 1 CVEs
• Nextcloudpi — 1 CVEs
• Officeonline — 1 CVEs
• Password Policy — 1 CVEs
• Sso & Saml Authentication — 1 CVEs
• Two-factor Webauthn — 1 CVEs
• Zipper — 1 CVEs