https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:19:50.387424+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2022-avi-1057 certfr-2022-avi-1057 — De multiples vulnérabilités ont été découvertes dans les produits Nextcloud. Elles permettent à un attaquant de provoqu… 2026-10-03T05:19:50.458525+00:00 certfr-2022-avi-1057 https://cve.radiocsirt.org/vuln/euvd-2026-257506 EUVD-2026-257506 2026-10-03T05:19:50.458579+00:00 EUVD-2026-257506 https://cve.radiocsirt.org/vuln/fkie_cve-2022-39334 fkie_cve-2022-39334 2026-10-03T05:19:50.458605+00:00

Nextcloud also ships a CLI utility called nextcloudcmd which is sometimes used for automated scripting and headless servers. Versions of nextcloudcmd prior to 3.6.1 would incorrectly trust invalid TLS certificates, which may enable a Man-in-the-middle attack that exposes sensitive data or credentials to a network attacker. This affects the CLI only. It does not affect the standard GUI desktop Nextcloud clients, and it does not affect the Nextcloud server.

 https://cve.radiocsirt.org/vuln/gsd-2022-39334 gsd-2022-39334 2026-10-03T05:19:50.458651+00:00 gsd-2022-39334 https://cve.radiocsirt.org/vuln/opensuse-su-2023:0090-1 openSUSE-SU-2023:0090-1 — Security update for nextcloud-desktop 2026-10-03T05:19:50.458672+00:00

Security update for nextcloud-desktop

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-39334 UBUNTU-CVE-2022-39334 2026-10-03T05:19:50.458707+00:00

Affected: Ubuntu:20.04:LTS: nextcloud-desktop, Ubuntu:22.04:LTS: nextcloud-desktop, Ubuntu:24.04:LTS: nextcloud-desktop, Ubuntu:25.10: nextcloud-desktop, Ubuntu:26.04:LTS: nextcloud-desktop

Nextcloud also ships a CLI utility called nextcloudcmd which is sometimes used for automated scripting and headless servers. Versions of nextcloudcmd prior to 3.6.1 would incorrectly trust invalid TLS certificates, which may enable a Man-in-the-middle attack that exposes sensitive data or credentials to a network attacker. This affects the CLI only. It does not affect the standard GUI desktop Nextcloud clients, and it does not affect the Nextcloud server.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2183 WID-SEC-W-2022-2183 — Nextcloud: Mehrere Schwachstellen 2026-10-03T05:19:50.458762+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Nextcloud ausnutzen, um einen Denial of Service Angriff durchzuführen, Informationen offenzulegen, einen Cross-Site-Scripting-Angriff durchzuführen oder Sicherheitsvorkehrungen zu umgehen.