https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T19:27:06.596272+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-03379 bdu:2026-03379 2026-10-07T19:27:06.666704+00:00 bdu:2026-03379 https://cve.radiocsirt.org/vuln/euvd-2026-262837 EUVD-2026-262837 2026-10-07T19:27:06.666748+00:00 EUVD-2026-262837 https://cve.radiocsirt.org/vuln/fkie_cve-2025-66554 fkie_cve-2025-66554 2026-10-07T19:27:06.666763+00:00

Contacts app for Nextcloud easily syncs contacts from various devices with your Nextcloud and allows editing. Prior to 5.5.4, 6.0.6, and 7.2.5, a malicious user was able to modify their organisation and title field to load additional CSS files. Javascript and other options were correctly blocked by the content security policy of the Nextcloud Server code. This vulnerability is fixed in 5.5.4, 6.0.6, and 7.2.5.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2757 WID-SEC-W-2025-2757 — Nextcloud (Contacts, Talk, Deck und Twofactor WebAuthn): Mehrere Schwachstellen 2026-10-07T19:27:06.666796+00:00

Ein Angreifer kann mehrere Schwachstellen in Nextcloud ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, um Dateien zu manipulieren, und um Sicherheitsvorkehrungen zu umgehen.