Nextcloud Server

4 known vulnerabilities in Nextcloud Server, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-77165 CVSS 6.5 medium File owners were unable to unlock TYPE_TOKEN locks placed by other users, leaving files permanently locked with no recovery path outside…
  • CVE-2026-82985 CVSS 6.5 medium The Photos app's filter-based "smart albums" build their file listing using the search configuration (photosSourceFolders) of the user…
  • CVE-2026-77164 CVSS 6.2 medium Circles' remote-instance signature verification fetches the attacker-supplied keyId URL before trust in the remote instance is…
  • CVE-2026-68493 CVSS 3.1 low After guessing a 62^15 complex unique identifier, a malicious logged in user was able to retrieve a list of memberships for a circle they…