Private circle can be added to another circle via API despite visibility restriction Analysed #3511998 Valid Insecure Direct Object Reference Low 2026-05-08 $150 87 View-only guests could see deleted Collectives pages in the trashbin Analysed #3521434 Valid Access Control Low 2026-05-08 – 87 Re-Sharing allows increase of privileges Analysed #889243 Valid Access Control Medium 2020-09-28 – 92 Group restriction bypass via bearer token in user_oidc (SETTING_RESTRICT_LOGIN_TO_GROUPS not enforced in Backend::getCurrentUserId) Analysed #3572848 Valid Access Control Medium 2026-05-21 $150 100 Mail contact autocomplete bypasses administrator-configured user enumeration restrictions and expose member information outside the intended scope Analysed #3617729 Valid Information Disclosure Medium 2026-09-04 $250 101 PIN bypass in PassCodeActivity via back button Analysed #3625210 Valid Authentication Medium 2026-06-07 $150 101 Sensitive Information Disclosure via Back Button Post Logout on https://apps.nextcloud.com/account/ Analysed #2946927 Valid No weakness recorded Low 2025-03-16 – 113 Remote Code Execution via Extract App Plugin Analysed #546753 Valid Command and Code Injection High 2019-05-30 – 124 Missing ownership check on remote wipe endpoint Analysed #819807 Valid Insecure Direct Object Reference High 2020-04-19 $500 141 Attacker can obtain write access to any federated share/public link Analysed #1170024 Valid Authentication High 2021-06-10 $4,000 142 Access to all files of remote user through shared file Analysed #258084 Valid Information Disclosure Medium 2020-03-01 – 154 User can delete data in shared folders he's not autorized to access Analysed #642515 Valid Access Control Medium 2020-04-10 – 173 Code injection possible with malformed Nextcloud Talk chat commands Analysed #851807 Valid Command and Code Injection High 2020-06-02 – 317