https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T21:39:37.527888+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-51810 cnvd-2021-51810 2026-10-03T21:39:37.593165+00:00 cnvd-2021-51810 https://cve.radiocsirt.org/vuln/euvd-2026-28045 EUVD-2026-28045 2026-10-03T21:39:37.593205+00:00 EUVD-2026-28045 https://cve.radiocsirt.org/vuln/fkie_cve-2021-32678 fkie_cve-2021-32678 2026-10-03T21:39:37.593220+00:00

Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.0.11, and 21.0.3, ratelimits are not applied to OCS API responses. This affects any OCS API controller (`OCSController`) using the `@BruteForceProtection` annotation. Risk depends on the installed applications on the Nextcloud Server, but could range from bypassing authentication ratelimits or spamming other Nextcloud users. The vulnerability is patched in versions 19.0.13, 20.0.11, and 21.0.3. No workarounds aside from upgrading are known to exist.

 https://cve.radiocsirt.org/vuln/gsd-2021-32678 gsd-2021-32678 2026-10-03T21:39:37.593253+00:00 gsd-2021-32678 https://cve.radiocsirt.org/vuln/opensuse-su-2021:1068-1 openSUSE-SU-2021:1068-1 — Security update for nextcloud 2026-10-03T21:39:37.593265+00:00

Security update for nextcloud