Bug bounty reports15,219

Publicly disclosed HackerOne reports, with the platform's own outcome and severity.

Disclosed bug bounty reports
Report	Status	Weakness	Severity	Disclosed	Bounty	Votes
Path Traversal Vulnerability in Nextcloud Tables Enables Arbitrary File Exfiltration of Any Files Supported by PhpSpreadsheet LibraryAnalysed#3249624	Valid	File and Path Handling	Medium	2025-10-16	–	63
Path traversal allows tricking the Talk Android app into writing files into it's root directoryAnalysed#1997029	Valid	File and Path Handling	Medium	2023-08-14	–	43
Remote code execution via path traversal in Zip extraction in the Extract appAnalysed#765291	Valid	File and Path Handling	High	2020-03-07	–	40
Arbitrary read of all SVG files on a Nextcloud serverAnalysed#1302155	Valid	File and Path Handling	High	2023-03-26	$1,250	36
CSRF vulnerability in Nextcloud Desktop Client 3.6.1 on Windows when clicking malicious linkAnalysed#1741430	Valid	Cross-Site Request Forgery	Medium	2023-01-11	–	25
Path Traversal in Nextcloud Talk Android Exposes User Credentials and Private Data via FileProviderAnalysed#3696266	Valid	File and Path Handling	Medium	2026-08-24	–	18

Status and severity are HackerOne's. “Access stated” is what the title says; “Access needed” and techniques come from CyberSIXT's analysis of the public report, where there is one, which can be wrong. Data as of 2026-11-15.