https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T21:12:40.320268+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-nextcloud-2026-45691 BIT-nextcloud-2026-45691 — Nextcloud: Bypass of second factor authentication on DAV endpoints 2026-10-03T21:12:40.370825+00:00

Affected: Bitnami: nextcloud

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, a pre-2FA session cookie (created after successful password authentication but before TOTP completion) could be reused as a Bearer token to authenticate against DAV endpoints, granting read/write access and bypassing mandatory two-factor authentication. It is recommended that the Nextcloud Server is upgraded to 33.0.3 or 32.0.9. It is recommended that the Nextcloud Enterprise Server is upgraded to 33.0.3, 32.0.9, 31.0.14.5, 30.0.17.9 or 29.0.16.16

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0583 certfr-2026-avi-0583 — De multiples vulnérabilités ont été découvertes dans les produits Nextcloud. Elles permettent à un attaquant de provoqu… 2026-10-03T21:12:40.370881+00:00 certfr-2026-avi-0583 https://cve.radiocsirt.org/vuln/euvd-2026-323575 EUVD-2026-323575 2026-10-03T21:12:40.370901+00:00 EUVD-2026-323575 https://cve.radiocsirt.org/vuln/fkie_cve-2026-45691 fkie_cve-2026-45691 2026-10-03T21:12:40.370914+00:00

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 32.0.0 to before 32.0.9, and 33.0.0 to before 33.0.3, a pre-2FA session cookie (created after successful password authentication but before TOTP completion) could be reused as a Bearer token to authenticate against DAV endpoints, granting read/write access and bypassing mandatory two-factor authentication. It is recommended that the Nextcloud Server is upgraded to 33.0.3 or 32.0.9. It is recommended that the Nextcloud Enterprise Server is upgraded to 33.0.3, 32.0.9, 31.0.14.5, 30.0.17.9 or 29.0.16.16

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1517 WID-SEC-W-2026-1517 — Nextcloud: Mehrere Schwachstellen 2026-10-03T21:12:40.370938+00:00

Ein Angreifer kann mehrere Schwachstellen in Nextcloud ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, und um einen SQL-Injection Angriff durchzuführen.