TI-2026-33296 CVE-2026-45545
Nextcloud: SQL Injection in Column Type Parameter Allows Arbitrary SQL Execution
Priority MEDIUM 42
Nextcloud is an open source content collaboration platform.
nextcloud
Records402All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical19CVSS 9.0–10.0
CVSS high73CVSS 7.0–8.9
Exploited now
nextcloud records in CISA KEVNo nextcloud vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
8 records in Tables · all components
TI-2026-33461 CVE-2026-45722
Nextcloud: Tables app allows limited SQLi in ORDER BY with malicious sort order argument for Table Views
Priority LOW 31
Nextcloud is an open source content collaboration platform.
TI-2024-35182 CVE-2024-52511
Nextcloud Tables has an Authorization Bypass Through User-Controlled Key in Tables
Priority LOW 29
Nextcloud Tables allows users to to create tables with individual columns.
TI-2025-40962 CVE-2025-66551
Nextcloud Tables is missing an ownership check which allows moving columns into tables of other users
Priority LOW 28
Nextcloud Tables allows you to create your own tables with individual columns.
Priority LOW 24
Nextcloud Tables allows you to create your own tables with individual columns.
TI-2025-40964 CVE-2025-66553
Nextcloud Tables app allowed users to view columns metadata information of any table
Priority LOW 20
Nextcloud Tables allows you to create your own tables with individual columns.
TI-2024-35178 CVE-2024-52507
Share information of the Nextcloud Tables app is not limited to affected users
Priority LOW 20
Nextcloud Tables allows users to to create tables with individual columns.
TI-2026-33295 CVE-2026-45544
Nextcloud: Information Disclosure of view filter metdata via Broken Sensitive Data Masking in ViewService
Priority LOW 19
Nextcloud is an open source content collaboration platform.