https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T08:41:57.820594+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-nextcloud-2021-43863 BIT-nextcloud-2021-43863 — SQL Injection in FileContentProvider (GHSL-2021-1007) 2026-10-04T08:41:57.875121+00:00

Affected: Bitnami: nextcloud

The Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. The Nextcloud Android app uses content providers to manage its data. Prior to version 3.18.1, the providers `FileContentProvider` and `DiskLruImageCacheFileProvider` have security issues (an SQL injection, and an insufficient permission control, respectively) that allow malicious apps in the same device to access Nextcloud's data bypassing the permission control system. Users should upgrade to version 3.18.1 to receive a patch. There are no known workarounds aside from upgrading.

 https://cve.radiocsirt.org/vuln/cnvd-2022-18415 cnvd-2022-18415 2026-10-04T08:41:57.875180+00:00 cnvd-2022-18415 https://cve.radiocsirt.org/vuln/euvd-2026-234488 EUVD-2026-234488 2026-10-04T08:41:57.875198+00:00 EUVD-2026-234488 https://cve.radiocsirt.org/vuln/fkie_cve-2021-43863 fkie_cve-2021-43863 2026-10-04T08:41:57.875210+00:00

The Nextcloud Android app is the Android client for Nextcloud, a self-hosted productivity platform. The Nextcloud Android app uses content providers to manage its data. Prior to version 3.18.1, the providers `FileContentProvider` and `DiskLruImageCacheFileProvider` have security issues (an SQL injection, and an insufficient permission control, respectively) that allow malicious apps in the same device to access Nextcloud's data bypassing the permission control system. Users should upgrade to version 3.18.1 to receive a patch. There are no known workarounds aside from upgrading.

 https://cve.radiocsirt.org/vuln/gsd-2021-43863 gsd-2021-43863 2026-10-04T08:41:57.875248+00:00 gsd-2021-43863