Is Nextcloud Server 26.0.3 affected?
Jun 22, 2023 · Release notes ↗
21 known vulnerabilities affect 26.0.3 (highest CVSS 8.5).
Your branch 26 has reached end of life (Mar 31, 2024).
125 newer releases in its track, up to 35.0.2. What changed up to 35.0.2
Vulnerabilities affecting 26.0.3
- 8.5 CVE-2023-48239 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.13, 26.0.8, and 27.1.3 of Nextcloud Server and starting in… fixed in 26.0.8
- 8.1 CVE-2024-37882 Nextcloud Server is a self hosted personal cloud system. A recipient of a share with read&share permissions could reshare the item with more permissions. It is recommended that the Nextcloud Server… fixed in 26.0.13
- 8.1 CVE-2023-39963 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 20.0.0 and prior to versions 20.0.14.15, 21.0.9.13, 22.2.10.14, 23.0.12.8, 24.0.12.5, 25.0.9… fixed in 26.0.4
- 7.7 CVE-2023-39962 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 19.0.0 and prior to versions 19.0.13.10, 20.0.14.15, 21.0.9.13, 22.2.10.14, 23.0.12.8, 24.0.… fixed in 26.0.4
- 7.3 CVE-2024-37313 Nextcloud server is a self hosted personal cloud system. Under some circumstance it was possible to bypass the second factor of 2FA after successfully providing the user credentials. It is recommen… fixed in 26.0.13
- 5.8 CVE-2023-39958 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 22.0.0 and prior to versions 22.2.10.13, 23.0.12.8, 24.0.12.5, 25.0.9, 26.0.4, and 27.0.1, m… fixed in 26.0.4
- 5.4 CVE-2023-49791 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. In Nextcloud Server prior to versions 26.0.9 and 27.1.4; as well as Nextcloud Enterprise Server prior to version… fixed in 26.0.9
- 5.3 CVE-2023-49792 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. In Nextcloud Server prior to versions 26.0.9 and 27.1.4; as well as Nextcloud Enterprise Server prior to version… fixed in 26.0.9
- 5.0 CVE-2023-48306 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.11, 26.0.6, and 27.1.0 of Nextcloud Server and starting in… fixed in 26.0.6
- 5.0 CVE-2023-39960 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. In Nextcloud Server starting with 25.0.0 and prior to 25.09 and 26.04; as well as Nextcloud Enterprise Server st… fixed in 26.0.4
- 4.3 CVE-2023-48304 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.11, 26.0.6, and 27.1.0 of Nextcloud Server and starting in… fixed in 26.0.6
- 4.3 CVE-2023-45148 Nextcloud is an open source home cloud server. When Memcached is used as `memcache.distributed` the rate limiting in Nextcloud Server could be reset unexpectedly resetting the rate count earlier th… fixed in 26.0.6
- 4.2 CVE-2023-48305 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.11, 26.0.6, and 27.1.0 of Nextcloud Server and Nextcloud E… fixed in 26.0.6
- 3.5 CVE-2024-37884 Nextcloud Server is a self hosted personal cloud system. A malicious user was able to send delete requests for old versions of files they only got shared with read permissions. It is recommended th… fixed in 26.0.13
- 3.5 CVE-2024-37315 Nextcloud Server is a self hosted personal cloud system. An attacker with read-only access to a file is able to restore older versions of a document when the files_versions app is enabled. It is re… fixed in 26.0.12
- 3.5 CVE-2023-48301 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.13, 26.0.8, and 27.1.3 of Nextcloud Server and Nextcloud E… fixed in 26.0.8
- 3.5 CVE-2023-48302 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.13, 26.0.8, and 27.1.3 of Nextcloud Server and Nextcloud E… fixed in 26.0.8
- 3.5 CVE-2023-39959 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.9, 26.0.4, and 27.0.1, unauthenticated users could send a… fixed in 26.0.4
- 3.5 CVE-2023-39961 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 24.0.4 and prior to versions 25.0.9, 26.0.4, and 27.0.1, when a folder with images or an ima… fixed in 26.0.4
- 3.0 CVE-2024-22403 Nextcloud server is a self hosted personal cloud system. In affected versions OAuth codes did not expire. When an attacker would get access to an authorization code they could authenticate at any t… fixed in 28.0.0
- 2.4 CVE-2023-48303 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.11, 26.0.6, and 27.1.0 of Nextcloud Server and Nextcloud E… fixed in 26.0.6
Newer releases
| 35.0.2 | Oct 15, 2026 | 26.0.3 → 35.0.2 |
| 35.0.1 | Sep 24, 2026 | 26.0.3 → 35.0.1 |
| 35.0.0 | Sep 15, 2026 | 26.0.3 → 35.0.0 |
| 34.0.5 | Oct 15, 2026 | 26.0.3 → 34.0.5 |
| 34.0.4 | Sep 10, 2026 | 26.0.3 → 34.0.4 |
| 34.0.3 | Aug 13, 2026 | 26.0.3 → 34.0.3 |
| 34.0.2 | Jul 23, 2026 | 26.0.3 → 34.0.2 |
| 34.0.1 | Jun 25, 2026 | 26.0.3 → 34.0.1 |
| 34.0.0 | Jun 8, 2026 | 26.0.3 → 34.0.0 |
| 33.0.10 | Oct 15, 2026 | 26.0.3 → 33.0.10 |
| 33.0.9 | Sep 10, 2026 | 26.0.3 → 33.0.9 |
| 33.0.8 | Aug 13, 2026 | 26.0.3 → 33.0.8 |
| 33.0.7 | Jul 23, 2026 | 26.0.3 → 33.0.7 |
| 33.0.6 | Jun 25, 2026 | 26.0.3 → 33.0.6 |
| 33.0.5 | Jun 2, 2026 | 26.0.3 → 33.0.5 |