https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T08:57:59.642153+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-39334 CVE-2022-39334 — nextcloudcmd incorrectly trusts bad TLS certificates 2026-10-06T08:57:59.659819+00:00

Affected: nextcloud security-advisories

Nextcloud also ships a CLI utility called nextcloudcmd which is sometimes used for automated scripting and headless servers. Versions of nextcloudcmd prior to 3.6.1 would incorrectly trust invalid TLS certificates, which may enable a Man-in-the-middle attack that exposes sensitive data or credentials to a network attacker. This affects the CLI only. It does not affect the standard GUI desktop Nextcloud clients, and it does not affect the Nextcloud server.