Skip to content

Product

Nextcloud news vulnerabilities

2 published CVES affecting Nextcloud news, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
1
Medium
0
Low
1
Unscored
0
CISA KEV
0

Latest Nextcloud news CVEs

Newest publication first

  1. CVE-2026-44515 Nextcloud News: Authenticated blind SSRF via feed URL

    Published
    LowCVSS 2.3 EPSS 0.19%

    Nextcloud News is an RSS/Atom feed reader. Prior to 28.3.0-beta.1, Nextcloud News allows authenticated users to add feeds by providing a feed URL (via the web interface or the API). In affected versions, an authenticated attacker could provide a URL pointing to internal/private I...

  2. CVE-2021-41256 Intent URI permissions manipulation in nextcloud news-android

    Published
    HighCVSS 7.1 EPSS 1.1%

    nextcloud news-android is an Android client for the Nextcloud news/feed reader app. In affected versions the Nextcloud News for Android app has a security issue by which a malicious application installed on the same device can send it an arbitrary Intent that gets reflected back,...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.