https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T22:35:40.638171+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-214672 EUVD-2026-214672 2026-10-07T22:35:40.703458+00:00 EUVD-2026-214672 https://cve.radiocsirt.org/vuln/fkie_cve-2023-29000 fkie_cve-2023-29000 2026-10-07T22:35:40.703495+00:00

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server. Starting with version 3.0.0 and prior to version 3.7.0, by trusting that the server will return a certificate that belongs to the keypair of the user, a malicious server could get the desktop client to encrypt files with a key known to the attacker. This issue is fixed in Nextcloud Desktop 3.7.0. No known workarounds are available.

 https://cve.radiocsirt.org/vuln/gsd-2023-29000 gsd-2023-29000 2026-10-07T22:35:40.703529+00:00 gsd-2023-29000 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-29000 UBUNTU-CVE-2023-29000 2026-10-07T22:35:40.703542+00:00

Affected: Ubuntu:20.04:LTS: nextcloud-desktop, Ubuntu:22.04:LTS: nextcloud-desktop

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server. Starting with version 3.0.0 and prior to version 3.7.0, by trusting that the server will return a certificate that belongs to the keypair of the user, a malicious server could get the desktop client to encrypt files with a key known to the attacker. This issue is fixed in Nextcloud Desktop 3.7.0. No known workarounds are available.