https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T21:11:35.522415+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-nextcloud-2026-45810 BIT-nextcloud-2026-45810 — Nextcloud: Propfind requests for file comments allowed to load comments for other files 2026-10-03T21:11:35.525644+00:00

Affected: Bitnami: nextcloud

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 31.0.0 to before 31.0.12, and 32.0.0 to before 32.0.3, a missing check of a relation allowed authenticated users with access to any file comment, to read the content of all comments. It is recommended that the Nextcloud Server is upgraded to 31.0.12 or 32.0.3. It is recommended that the Nextcloud Enterprise Server is upgraded to 21.0.9.20, 22.2.10.35, 23.0.12.31, 24.0.12.30, 25.0.13.25, 26.0.13.22, 27.1.11.22, 28.0.14.13, 29.0.16.10, 30.0.17.5, 31.0.12 or 32.0.3

 https://cve.radiocsirt.org/vuln/euvd-2026-323826 EUVD-2026-323826 2026-10-03T21:11:35.525696+00:00 EUVD-2026-323826 https://cve.radiocsirt.org/vuln/fkie_cve-2026-45810 fkie_cve-2026-45810 2026-10-03T21:11:35.525712+00:00

Nextcloud is an open source content collaboration platform. In Nextcloud Server from versions 31.0.0 to before 31.0.12, and 32.0.0 to before 32.0.3, a missing check of a relation allowed authenticated users with access to any file comment, to read the content of all comments. It is recommended that the Nextcloud Server is upgraded to 31.0.12 or 32.0.3. It is recommended that the Nextcloud Enterprise Server is upgraded to 21.0.9.20, 22.2.10.35, 23.0.12.31, 24.0.12.30, 25.0.13.25, 26.0.13.22, 27.1.11.22, 28.0.14.13, 29.0.16.10, 30.0.17.5, 31.0.12 or 32.0.3

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1773 WID-SEC-W-2026-1773 — Nextcloud: Mehrere Schwachstellen 2026-10-03T21:11:35.525736+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Nextcloud ausnutzen, um Sicherheitsvorkehrungen zu umgehen, einen Denial of Service zu verursachen und Informationen offenzulegen.