Insecure Direct Object Reference

Every one of the 28 is a mark on the map. Named now: 1 to 26, most at risk first.

1. File Drop can be bypassed using Richdocuments app in nextcloudCVE-2021-37628nextcloud · CVSS 7.5 · 2.1% likely

   CWE-639

2. Attacker can obtain write access to any federated share/public linkCVE-2021-32654nextcloud · CVSS 8.1 · 1.8% likely

   CWE-6391 bounty report

3. An Insecure direct object reference vulnerability in Nextcloud Server 18.0.2 allowed an attacker to remote wipe devices of other users when sending a malicious request directly to…CVE-2020-8154Nextcloud · 1.8% likely

   CWE-6391 bounty report

4. Nextcloud Deck before 1.0.2 suffers from an insecure direct object reference (IDOR) vulnerability that permits users with a duplicate user identifier to access deck data of a prev…CVE-2020-8297Nextcloud · 1.3% likely

   CWE-6391 bounty report

5. Missing permission check on Deck APICVE-2021-39225nextcloud · CVSS 8.1 · 1.3% likely

   CWE-6391 bounty report

6. Circle can be accessed by non-Circle members in Nextcloud DeckCVE-2021-37631nextcloud · CVSS 6.5 · 1.3% likely

   CWE-639

7. Secret Circle can be joined without approval in Nextcloud CirclesCVE-2021-37630nextcloud · CVSS 6.5 · 1.2% likely

   CWE-639

8. Possibility for anyone to add a stack with existing tasks on anyone's board in Nextcloud DeckCVE-2022-29159nextcloud · CVSS 5 · 1.0% likely

   CWE-6391 bounty report

9. Missing access control in Nextcloud Deck 1.0.4 caused an insecure direct object reference allowing an attacker to view all attachments.CVE-2020-8235Nextcloud · 0.8% likely

   CWE-6391 bounty report

10. Nextcloud Server before 11.0.7 and 12.0.5 suffers from an Authorization Bypass Through User-Controlled Key vulnerability. A missing ownership check allowed logged-in users to chan…CVE-2017-0936Nextcloud · 0.8% likely

    CWE-6391 bounty report

11. Nextcloud Server vulnerable to attacker enabling/disabling birthday calendar for any userCVE-2023-48304nextcloud · CVSS 4.3 · 0.6% likely

    CWE-6391 bounty report

12. Nextcloud Deck vulnerable to authorization bypassCVE-2023-22471nextcloud · CVSS 3.5 · 0.5% likely

    CWE-6391 bounty report

13. Nextcloud Tables has an Authorization Bypass Through User-Controlled Key in TablesCVE-2024-52511nextcloud · CVSS 6.3 · 0.5% likely

    CWE-6391 bounty report

14. IDOR Vulnerability in Nextcloud MailCVE-2023-25160nextcloud · CVSS 4.1 · 0.5% likely

    CWE-639

15. Share information of the Nextcloud Tables app is not limited to affected usersCVE-2024-52507nextcloud · CVSS 3.5 · 0.4% likely

    CWE-6391 bounty report

16. Nextcloud Server 30.0.0 is vulnerable to an Insecure Direct Object Reference (IDOR) in the /core/preview endpoint. Any authenticated user can access previews of arbitrary files be…CVE-2025-64011Nextcloud · CVSS 4.3 · 0.3% likely

    CWE-639

17. Nextcloud Tables app share information not limited to relevant usersCVE-2025-66513nextcloud · CVSS 4.3 · 0.3% likely

    CWE-6391 bounty report

18. Nextcloud Server users can modify tags on files that do not belong to themCVE-2025-66547nextcloud · CVSS 4.3 · 0.3% likely

    CWE-6391 bounty report

19. Nextcloud Twofactor WebAuthn app was updated based on public keyCVE-2025-66558nextcloud · CVSS 3.1 · 0.3% likely

    CWE-6391 bounty report

20. Nextcloud Tables app allowed users to view columns metadata information of any tableCVE-2025-66553nextcloud · CVSS 4.3 · 0.3% likely

    CWE-6391 bounty report

21. Nextcloud: Cross-Account Calendar Takeover via Unauthorized Group-Member-Set UpdateCVE-2026-45281nextcloud · CVSS 8.1 · 0.3% likely

    CWE-639

22. Nextcloud talk allows participants to blindly delete poll drafts of other users by IDCVE-2025-66556nextcloud · CVSS 3.5 · 0.3% likely

    CWE-6391 bounty report

23. Nextcloud Tables is missing an ownership check which allows moving columns into tables of other usersCVE-2025-66551nextcloud · CVSS 6.3 · 0.3% likely

    CWE-6391 bounty report

24. Nextcloud: Propfind requests for file comments allowed to load comments for other filesCVE-2026-45810nextcloud · CVSS 6.8 · 0.3% likely

    CWE-639

25. After guessing a 62^15 complex unique identifier, a malicious logged in user was able to retrieve a list of memberships for a circle they are not a member of.CVE-2026-68493Nextcloud · CVSS 3.1 · 0.2% likely

    CWE-6391 bounty report

26. Nextcloud: Files drop share links for end-to-end encrypted folders allowed to drop files into other folders of the share ownerCVE-2026-45159nextcloud · CVSS 3.5 · 0.2% likely

    CWE-6391 bounty report

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.