https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T14:57:33.572719+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-nextcloud-2023-28999 BIT-nextcloud-2023-28999 — Nextcloud: Lack of authenticity of metadata keys allows a malicious server to gain access to E2EE folders 2026-10-04T14:57:33.651198+00:00

Affected: Bitnami: nextcloud

Nextcloud is an open-source productivity platform. In Nextcloud Desktop client 3.0.0 until 3.8.0, Nextcloud Android app 3.13.0 until 3.25.0, and Nextcloud iOS app 3.0.5 until 4.8.0, a malicious server administrator can gain full access to an end-to-end encrypted folder. They can decrypt files, recover the folder structure and add new files.​ This issue is fixed in Nextcloud Desktop 3.8.0, Nextcloud Android 3.25.0, and Nextcloud iOS 4.8.0. No known workarounds are available.

 https://cve.radiocsirt.org/vuln/euvd-2026-214677 EUVD-2026-214677 2026-10-04T14:57:33.651280+00:00 EUVD-2026-214677 https://cve.radiocsirt.org/vuln/fkie_cve-2023-28999 fkie_cve-2023-28999 2026-10-04T14:57:33.651298+00:00

Nextcloud is an open-source productivity platform. In Nextcloud Desktop client 3.0.0 until 3.8.0, Nextcloud Android app 3.13.0 until 3.25.0, and Nextcloud iOS app 3.0.5 until 4.8.0, a malicious server administrator can gain full access to an end-to-end encrypted folder. They can decrypt files, recover the folder structure and add new files.​ This issue is fixed in Nextcloud Desktop 3.8.0, Nextcloud Android 3.25.0, and Nextcloud iOS 4.8.0. No known workarounds are available.

 https://cve.radiocsirt.org/vuln/gsd-2023-28999 gsd-2023-28999 2026-10-04T14:57:33.651323+00:00 gsd-2023-28999 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-28999 UBUNTU-CVE-2023-28999 2026-10-04T14:57:33.651335+00:00

Affected: Ubuntu:20.04:LTS: nextcloud-desktop, Ubuntu:22.04:LTS: nextcloud-desktop, Ubuntu:24.04:LTS: nextcloud-desktop, Ubuntu:25.10: nextcloud-desktop, Ubuntu:26.04:LTS: nextcloud-desktop

Nextcloud is an open-source productivity platform. In Nextcloud Desktop client 3.0.0 until 3.8.0, Nextcloud Android app 3.13.0 until 3.25.0, and Nextcloud iOS app 3.0.5 until 4.8.0, a malicious server administrator can gain full access to an end-to-end encrypted folder. They can decrypt files, recover the folder structure and add new files.​ This issue is fixed in Nextcloud Desktop 3.8.0, Nextcloud Android 3.25.0, and Nextcloud iOS 4.8.0. No known workarounds are available.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0847 WID-SEC-W-2023-0847 — Nextcloud: Mehrere Schwachstellen ermöglichen Manipulation von Dateien 2026-10-04T14:57:33.651365+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen in Nextcloud ausnutzen, um Dateien zu manipulieren.