Is Nextcloud Server 26.0.7 affected?
Sep 21, 2023 · Release notes ↗
10 known vulnerabilities affect 26.0.7 (highest CVSS 8.5).
Your branch 26 has reached end of life (Mar 31, 2024).
121 newer releases in its track, up to 35.0.2. What changed up to 35.0.2
Vulnerabilities affecting 26.0.7
- 8.5 CVE-2023-48239 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.13, 26.0.8, and 27.1.3 of Nextcloud Server and starting in… fixed in 26.0.8
- 8.1 CVE-2024-37882 Nextcloud Server is a self hosted personal cloud system. A recipient of a share with read&share permissions could reshare the item with more permissions. It is recommended that the Nextcloud Server… fixed in 26.0.13
- 7.3 CVE-2024-37313 Nextcloud server is a self hosted personal cloud system. Under some circumstance it was possible to bypass the second factor of 2FA after successfully providing the user credentials. It is recommen… fixed in 26.0.13
- 5.4 CVE-2023-49791 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. In Nextcloud Server prior to versions 26.0.9 and 27.1.4; as well as Nextcloud Enterprise Server prior to version… fixed in 26.0.9
- 5.3 CVE-2023-49792 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. In Nextcloud Server prior to versions 26.0.9 and 27.1.4; as well as Nextcloud Enterprise Server prior to version… fixed in 26.0.9
- 3.5 CVE-2024-37884 Nextcloud Server is a self hosted personal cloud system. A malicious user was able to send delete requests for old versions of files they only got shared with read permissions. It is recommended th… fixed in 26.0.13
- 3.5 CVE-2024-37315 Nextcloud Server is a self hosted personal cloud system. An attacker with read-only access to a file is able to restore older versions of a document when the files_versions app is enabled. It is re… fixed in 26.0.12
- 3.5 CVE-2023-48301 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.13, 26.0.8, and 27.1.3 of Nextcloud Server and Nextcloud E… fixed in 26.0.8
- 3.5 CVE-2023-48302 Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.13, 26.0.8, and 27.1.3 of Nextcloud Server and Nextcloud E… fixed in 26.0.8
- 3.0 CVE-2024-22403 Nextcloud server is a self hosted personal cloud system. In affected versions OAuth codes did not expire. When an attacker would get access to an authorization code they could authenticate at any t… fixed in 28.0.0
Newer releases
| 35.0.2 | Oct 15, 2026 | 26.0.7 → 35.0.2 |
| 35.0.1 | Sep 24, 2026 | 26.0.7 → 35.0.1 |
| 35.0.0 | Sep 15, 2026 | 26.0.7 → 35.0.0 |
| 34.0.5 | Oct 15, 2026 | 26.0.7 → 34.0.5 |
| 34.0.4 | Sep 10, 2026 | 26.0.7 → 34.0.4 |
| 34.0.3 | Aug 13, 2026 | 26.0.7 → 34.0.3 |
| 34.0.2 | Jul 23, 2026 | 26.0.7 → 34.0.2 |
| 34.0.1 | Jun 25, 2026 | 26.0.7 → 34.0.1 |
| 34.0.0 | Jun 8, 2026 | 26.0.7 → 34.0.0 |
| 33.0.10 | Oct 15, 2026 | 26.0.7 → 33.0.10 |
| 33.0.9 | Sep 10, 2026 | 26.0.7 → 33.0.9 |
| 33.0.8 | Aug 13, 2026 | 26.0.7 → 33.0.8 |
| 33.0.7 | Jul 23, 2026 | 26.0.7 → 33.0.7 |
| 33.0.6 | Jun 25, 2026 | 26.0.7 → 33.0.6 |
| 33.0.5 | Jun 2, 2026 | 26.0.7 → 33.0.5 |