Product by Nextcloud
Nextcloud Server
9 known vulnerabilities in Nextcloud Server (Nextcloud), 0 of them actively exploited (CISA KEV).
Key figures
9
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2021-41178 | File Traversal affecting SVG files on Nextcloud Server | 8.8 | |
| Medium | CVE-2026-77165 | Nextcloud Server: Improper Access Control | 6.5 | |
| Medium | CVE-2021-41179 | Two-Factor Authentication not enforced for pages marked as public | 6.5 | |
| Medium | CVE-2026-82985 | Nextcloud Server: Improper Access Control | 6.5 | |
| High | CVE-2026-77167 | Nextcloud Server: Uncontrolled Resource Consumption | 7.5 | |
| Medium | CVE-2026-77164 | Nextcloud Server: Server-Side Request Forgery (SSRF) | 6.2 | |
| Medium | CVE-2026-77172 | Nextcloud Server: Improper Privilege Management | 5.3 | |
| Medium | CVE-2026-82984 | Nextcloud Server: Improper Access Control | 4.3 | |
| Low | CVE-2026-68493 | Nextcloud Server: Authorization Bypass Through User-Controlled Key | 3.1 |