https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T14:13:12.825641+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-01788 bdu:2022-01788 2026-10-10T14:13:12.829494+00:00 bdu:2022-01788 https://cve.radiocsirt.org/vuln/certfr-2021-avi-641 certfr-2021-avi-641 — De multiples vulnérabilités ont été découvertes dans le client Nextcloud Desktop. Elles permettent à un attaquant de pr… 2026-10-10T14:13:12.829525+00:00 certfr-2021-avi-641 https://cve.radiocsirt.org/vuln/euvd-2026-28111 EUVD-2026-28111 2026-10-10T14:13:12.829544+00:00 EUVD-2026-28111 https://cve.radiocsirt.org/vuln/fkie_cve-2021-32728 fkie_cve-2021-32728 2026-10-10T14:13:12.829556+00:00

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with a computer. Clients using the Nextcloud end-to-end encryption feature download the public and private key via an API endpoint. In versions prior to 3.3.0, the Nextcloud Desktop client fails to check if a private key belongs to previously downloaded public certificate. If the Nextcloud instance serves a malicious public key, the data would be encrypted for this key and thus could be accessible to a malicious actor. This issue is fixed in Nextcloud Desktop Client version 3.3.0. There are no known workarounds aside from upgrading.

 https://cve.radiocsirt.org/vuln/gsd-2021-32728 gsd-2021-32728 2026-10-10T14:13:12.829585+00:00 gsd-2021-32728 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-32728 UBUNTU-CVE-2021-32728 2026-10-10T14:13:12.829596+00:00

Affected: Ubuntu:20.04:LTS: nextcloud-desktop, Ubuntu:22.04:LTS: nextcloud-desktop

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with a computer. Clients using the Nextcloud end-to-end encryption feature download the public and private key via an API endpoint. In versions prior to 3.3.0, the Nextcloud Desktop client fails to check if a private key belongs to previously downloaded public certificate. If the Nextcloud instance serves a malicious public key, the data would be encrypted for this key and thus could be accessible to a malicious actor. This issue is fixed in Nextcloud Desktop Client version 3.3.0. There are no known workarounds aside from upgrading.