https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:06:37.886627+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-28999 CVE-2023-28999 — Nextcloud: Lack of authenticity of metadata keys allows a malicious server to gain access to E2EE folders 2026-10-03T15:06:37.902505+00:00

Affected: nextcloud security-advisories

Nextcloud is an open-source productivity platform. In Nextcloud Desktop client 3.0.0 until 3.8.0, Nextcloud Android app 3.13.0 until 3.25.0, and Nextcloud iOS app 3.0.5 until 4.8.0, a malicious server administrator can gain full access to an end-to-end encrypted folder. They can decrypt files, recover the folder structure and add new files.​ This issue is fixed in Nextcloud Desktop 3.8.0, Nextcloud Android 3.25.0, and Nextcloud iOS 4.8.0. No known workarounds are available.