https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T14:39:37.897409+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-nextcloud-2026-45157 BIT-nextcloud-2026-45157 — Nextcloud: Valid share tokens allow to access tempory upload files of share owner 2026-10-04T14:39:37.937112+00:00

Affected: Bitnami: nextcloud

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, when a malicious user has access to a file share of a user, they could use this share token to also access the chunking upload directly and see temporary part files during on going uploads. It is recommended that the Nextcloud Server is upgraded to 32.0.9 or 33.0.3. It is recommended that the Nextcloud Enterprise Server is upgraded to 26.0.13.26, 27.1.11.25, 28.0.14.17, 29.0.16.16, 30.0.17.9, 31.0.14.5, 32.0.9 or 33.0.3

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0569 certfr-2026-avi-0569 — De multiples vulnérabilités ont été découvertes dans les produits Nextcloud. Certaines d'entre elles permettent à un at… 2026-10-04T14:39:37.937167+00:00 certfr-2026-avi-0569 https://cve.radiocsirt.org/vuln/euvd-2026-323563 EUVD-2026-323563 2026-10-04T14:39:37.937188+00:00 EUVD-2026-323563 https://cve.radiocsirt.org/vuln/fkie_cve-2026-45157 fkie_cve-2026-45157 2026-10-04T14:39:37.937200+00:00

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, when a malicious user has access to a file share of a user, they could use this share token to also access the chunking upload directly and see temporary part files during on going uploads. It is recommended that the Nextcloud Server is upgraded to 32.0.9 or 33.0.3. It is recommended that the Nextcloud Enterprise Server is upgraded to 26.0.13.26, 27.1.11.25, 28.0.14.17, 29.0.16.16, 30.0.17.9, 31.0.14.5, 32.0.9 or 33.0.3

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1471 WID-SEC-W-2026-1471 — Nextcloud: Mehrere Schwachstellen 2026-10-04T14:39:37.937223+00:00

Ein Angreifer kann mehrere Schwachstellen im Nextcloud Server und verschiedenen Apps ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, und um Dateien zu manipulieren.