https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T07:41:30.379809+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-05874 bdu:2023-05874 2026-10-05T07:41:30.485829+00:00 bdu:2023-05874 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0649 certfr-2023-avi-0649 — De multiples vulnérabilités ont été découvertes dans les produits Nextcloud. Certaines d'entre elles permettent à un at… 2026-10-05T07:41:30.485866+00:00 certfr-2023-avi-0649 https://cve.radiocsirt.org/vuln/euvd-2026-194782 EUVD-2026-194782 2026-10-05T07:41:30.485888+00:00 EUVD-2026-194782 https://cve.radiocsirt.org/vuln/fkie_cve-2023-39963 fkie_cve-2023-39963 2026-10-05T07:41:30.485902+00:00

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 20.0.0 and prior to versions 20.0.14.15, 21.0.9.13, 22.2.10.14, 23.0.12.8, 24.0.12.5, 25.0.9, 26.0.4, and 27.0.1, a missing password confirmation allowed an attacker, after successfully stealing a session from a logged in user, to create app passwords for the victim. Nextcloud server versions 25.0.9, 26.0.4, and 27.0.1 and Nextcloud Enterprise Server versions 20.0.14.15, 21.0.9.13, 22.2.10.14, 23.0.12.9, 24.0.12.5, 25.0.9, 26.0.4, and 27.0.1 contain a patch for this issue. No known workarounds are available.

 https://cve.radiocsirt.org/vuln/gsd-2023-39963 gsd-2023-39963 2026-10-05T07:41:30.485933+00:00 gsd-2023-39963 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2032 WID-SEC-W-2023-2032 — Nextcloud: Mehrere Schwachstellen 2026-10-05T07:41:30.485946+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Nextcloud ausnutzen, um einen Denial of Service zu verursachen, Sicherheitsvorkehrungen zu umgehen und Informationen offenzulegen.