https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T08:26:40.195518+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-03384 bdu:2026-03384 2026-10-04T08:26:40.199340+00:00 bdu:2026-03384 https://cve.radiocsirt.org/vuln/bit-nextcloud-2025-66510 BIT-nextcloud-2025-66510 — Nextcloud Server Contacts Search allowed users to retrieve contact information of other users beyond their contact list 2026-10-04T08:26:40.199384+00:00

Affected: Bitnami: nextcloud

Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server prior to 31.0.10 and 32.0.1 and Nextcloud Enterprise Server prior to 28.0.14.11, 29.0.16.8, 30.0.17.3, and 31.0.10, contacts search allowed to retrieve personal data of other users (emails, names, identifiers) without proper access control. This allows an authenticated user to retrieve information about accounts that are not related or added as contacts.

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1066 certfr-2025-avi-1066 — De multiples vulnérabilités ont été découvertes dans les produits Nextcloud. Certaines d'entre elles permettent à un at… 2026-10-04T08:26:40.199420+00:00 certfr-2025-avi-1066 https://cve.radiocsirt.org/vuln/euvd-2026-262696 EUVD-2026-262696 2026-10-04T08:26:40.199438+00:00 EUVD-2026-262696 https://cve.radiocsirt.org/vuln/fkie_cve-2025-66510 fkie_cve-2025-66510 2026-10-04T08:26:40.199450+00:00

Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server prior to 31.0.10 and 32.0.1 and Nextcloud Enterprise Server prior to 28.0.14.11, 29.0.16.8, 30.0.17.3, and 31.0.10, contacts search allowed to retrieve personal data of other users (emails, names, identifiers) without proper access control. This allows an authenticated user to retrieve information about accounts that are not related or added as contacts.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2752 WID-SEC-W-2025-2752 — Nextcloud: Mehrere Schwachstellen 2026-10-04T08:26:40.199471+00:00

Ein Angreifer kann mehrere Schwachstellen in Nextcloud ausnutzen, um Dateien zu manipulieren, um Informationen offenzulegen, um einen Cross-Site Scripting Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen, und um falsche Informationen darzustellen.