https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T16:01:37.362084+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0569 certfr-2026-avi-0569 — De multiples vulnérabilités ont été découvertes dans les produits Nextcloud. Certaines d'entre elles permettent à un at… 2026-10-03T16:01:37.365072+00:00 certfr-2026-avi-0569 https://cve.radiocsirt.org/vuln/euvd-2026-323828 EUVD-2026-323828 2026-10-03T16:01:37.365112+00:00 EUVD-2026-323828 https://cve.radiocsirt.org/vuln/fkie_cve-2026-45285 fkie_cve-2026-45285 2026-10-03T16:01:37.365128+00:00

Nextcloud is an open source content collaboration platform. From versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, when a user shares a folder or file with a Nextcloud Team that includes an external member (a person added via email address who does not have a Nextcloud account), the system automatically creates a public link for that external member. This public link is not displayed in the share section of the folder, so the folder owner has no knowledge of its existence. It is sent via email to the external member. It grants the same permissions (read, write, delete, reshare, download) as the Team’s access. An attacker who receives or intercepts this link can access, modify, delete, reshare, and download all data in the shared folder without any further authentication. The folder owner cannot see or revoke the link through the normal sharing interface. This issue has been patched in versions 32.0.9 and 33.0.3.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1471 WID-SEC-W-2026-1471 — Nextcloud: Mehrere Schwachstellen 2026-10-03T16:01:37.365163+00:00

Ein Angreifer kann mehrere Schwachstellen im Nextcloud Server und verschiedenen Apps ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, und um Dateien zu manipulieren.