https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:04:18.495997+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2022-avi-1057 certfr-2022-avi-1057 — De multiples vulnérabilités ont été découvertes dans les produits Nextcloud. Elles permettent à un attaquant de provoqu… 2026-10-03T12:04:18.500523+00:00 certfr-2022-avi-1057 https://cve.radiocsirt.org/vuln/euvd-2026-233390 EUVD-2026-233390 2026-10-03T12:04:18.500566+00:00 EUVD-2026-233390 https://cve.radiocsirt.org/vuln/fkie_cve-2022-39339 fkie_cve-2022-39339 2026-10-03T12:04:18.500581+00:00

user_oidc is an OpenID Connect user backend for Nextcloud. In versions prior to 1.2.1 sensitive information such as the OIDC client credentials and tokens are sent in plain text of HTTP without TLS. Any malicious actor with access to monitor user traffic may have been able to compromise account security. This issue has been addressed in in user_oidc v1.2.1. Users are advised to upgrade. Users unable to upgrade may use https to access Nextcloud. Set an HTTPS discovery URL in the provider settings (in Nextcloud OIDC admin settings).

 https://cve.radiocsirt.org/vuln/gsd-2022-39339 gsd-2022-39339 2026-10-03T12:04:18.500613+00:00 gsd-2022-39339 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2183 WID-SEC-W-2022-2183 — Nextcloud: Mehrere Schwachstellen 2026-10-03T12:04:18.500626+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Nextcloud ausnutzen, um einen Denial of Service Angriff durchzuführen, Informationen offenzulegen, einen Cross-Site-Scripting-Angriff durchzuführen oder Sicherheitsvorkehrungen zu umgehen.