nextcloud
Number 62 by total vulnerabilities in the catalog.
Computed from the whole catalog when the site is built.
Combines these spellings from source records: NextCloud, Nextcloud, nextcloud
Total vulnerabilities
306
Critical
4
High
34
Known Exploited
0
Exploit available
0
Network, no login needed
14.0%
Of 285 scored records
- Critical
- High
- Medium
- Low
- None or not scored
Show as table
| Period | Total | Critical | High | Medium | Low | None or not scored |
|---|---|---|---|---|---|---|
| 2026 (incomplete) | 45 | 0 | 5 | 28 | 12 | 0 |
| 2025 | 26 | 0 | 0 | 16 | 10 | 0 |
| 2024 | 37 | 2 | 3 | 16 | 15 | 1 |
| 2023 | 80 | 1 | 12 | 41 | 25 | 1 |
| 2022 | 50 | 0 | 2 | 24 | 24 | 0 |
| 2021 | 47 | 1 | 12 | 24 | 10 | 0 |
| 2020 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2019 | 2 | 0 | 0 | 0 | 0 | 2 |
| 2018 | 7 | 0 | 0 | 0 | 0 | 7 |
| 2017 | 12 | 0 | 0 | 0 | 0 | 12 |
Top products
| Product | Total | Critical/High |
|---|---|---|
| security-advisories | 260 | 34 |
| Nextcloud Server | 15 | 0 |
| Server | 6 | 0 |
| Collectives | 2 | 0 |
| Tables | 2 | 0 |
| com.nextcloud.client | 2 | 0 |
| Approval | 1 | 0 |
| Deck | 1 | 0 |
| Files Confidential | 1 | 0 |
| Files Lock | 1 | 0 |
Top bug types
| Bug type | Total | Critical/High |
|---|---|---|
| Improper Access Control | 54 | 7 |
| Information Disclosure | 29 | 2 |
| Insecure Direct Object Reference | 24 | 4 |
| Cross-Site Scripting | 22 | 0 |
| Authentication Issues | 20 | 4 |
| Improper Restriction of Excessive Authentication Attempts | 12 | 4 |
| Server-Side Request Forgery | 12 | 1 |
| Denial of Service | 11 | 1 |
| URL Redirection to Untrusted Site ('Open Redirect') | 6 | 0 |
| Cleartext Storage of Sensitive Information | 5 | 0 |
Newest vulnerabilities
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2026-87897 | Nextcloud whiteboard: Server-Side Request Forgery | Medium | 0.2% | |
| CVE-2026-82986 | Nextcloud Tables: Improper Access Control | Medium | 0.2% | |
| CVE-2026-82984 | Nextcloud Server: Improper Access Control | Medium | 0.3% | |
| CVE-2026-82983 | Nextcloud Tables: Information Disclosure | Low | 0.1% | |
| CVE-2026-77173 | Nextcloud Files Confidential: Improper Access Control | Medium | 0.2% | |
| CVE-2026-77172 | Nextcloud Server: Privilege Escalation | Medium | 0.3% | |
| CVE-2026-77171 | Nextcloud Collectives: Improper Access Control | Low | 0.2% | |
| CVE-2026-77167 | Nextcloud server: Denial of Service | High | 0.4% | |
| CVE-2026-67400 | Nextcloud Richdocuments: Improper Access Control | Low | 0.2% | |
| CVE-2026-77166 | Nextcloud Collectives vulnerability | Low | 0.3% |