Nextcloud · weakness class

Open Redirect

6 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

Geolocation preview links can be set to arbitrary links in nextcloud talkCVE-2021-41180nextcloud · CVSS 4.7 · 1.0% likely
CWE-601 1 bounty report
Open Redirect in Nextcloud TalkCVE-2022-24887nextcloud · CVSS 4.3 · 0.9% likely
CWE-601 1 bounty report
Nextcloud Server vulnerable to open redirect on "Unsupported browser" warningCVE-2023-35171nextcloud · CVSS 4.1 · 0.6% likely
CWE-601 1 bounty report
Open redirect in user_saml via RelayState parameter in Nextcloud User SamlCVE-2024-22400nextcloud · CVSS 3.1 · 0.5% likely
CWE-601 1 bounty report
Nextcloud User OIDC has an open redirection when logging in with User OIDCCVE-2024-52512nextcloud · CVSS 3.3 · 0.4% likely
CWE-601 1 bounty report
Nextcloud: Open Redirect in user_oidc login flow via protocol-relative URL bypassCVE-2026-45278nextcloud · CVSS 3.3 · 0.2% likely
CWE-601

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.