Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2026-77171

Public Link Allows Unauthorized Page Creation in Nextcloud Collectives

A public shared collective always allowed recipients of the link to create pages.

CVSS 3.0 · 3.5 Low EPSS < 1% KEV · Not listed
Vendors
Nextcloud
Products
Collectives
CVE-2026-77166

Inadequate Input Validation in Emoji Update Endpoint Causes Layout Breakage

The emoji field in the page emoji update endpoint does not properly validate user input. By injecting long text and line breaks, the sidebar layout becomes broken and can hide other items.

CVSS 3.0 · 2.4 Low EPSS < 1% KEV · Not listed
Vendors
Nextcloud
Products
Collectives
CVE-2026-45154

Nextcloud: Improper Access Control in Collectives

Nextcloud is an open source content collaboration platform. From version 2.6.0 to before version 4.3.0, when a previous collective pages was deleted and the collective was shared view-only, guests with access to the collective were able to access the deleted pages directly from the trashbin. This issue has been patched in version 4.3.0.

CVSS 3.1 · 2.6 Low EPSS < 1% KEV · Not listed
Vendors
Nextcloud
Products
Collectives