Known Vulnerabilities for Contacts by Nextcloud
Listed below are 6 of the newest known vulnerabilities associated with "Contacts" by "Nextcloud".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-72718 json | goose is general-purpose AI agent that runs on your machine. Prior to 1.44.0, the `goose review` command runs the system `git... | Not Provided | 2026-08-10 | 2026-08-10 |
| CVE-2026-64746 json | An authorization issue was addressed with improved validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.... | Not Provided | 2026-07-27 | 2026-08-17 |
| CVE-2026-64745 json | This issue was addressed with additional restrictions on the lock screen. This issue is fixed in macOS Sequoia 15.7.8, macOS ... | Not Provided | 2026-07-27 | 2026-07-28 |
| CVE-2026-64274 json | In the Linux kernel, the following vulnerability has been resolved: Input: goodix - clamp the device-reported contact count ... | Not Provided | 2026-07-25 | 2026-08-17 |
| CVE-2026-53857 json | OpenClaw before 2026.5.3 contains a policy enforcement vulnerability where Zalo contacts with mutable display metadata could ... | Not Provided | 2026-06-16 | 2026-06-18 |
| CVE-2026-50167 json | Kurrier is a modern, self-hosted workspace for email, calendar, contacts, and storage. Prior to 1.2.4, Kurrier API endpoints ... | Not Provided | 2026-08-18 | 2026-08-19 |
| CVE-2026-49141 json | WACRM prior to commit 73041bf contain an authorization bypass vulnerability in the automation engine that allows authenticate... | Not Provided | 2026-06-08 | 2026-07-14 |
| CVE-2026-48948 json | An improper access check allows user to download vcard exports of com_contact contacts that are inaccessible. | Not Provided | 2026-07-07 | 2026-07-08 |
| CVE-2026-48856 json | Sensitive Data Exposure vulnerability in Erlang OTP inets (httpc_response module) allows Retrieve Embedded Sensitive Data. T... | Not Provided | 2026-06-10 | 2026-07-24 |
| CVE-2026-47430 json | ## Summary The iOS implementation of `cordova-plugin-inappbrowser` passes the `id` field from a `WKScriptMessage` body to `c... | Not Provided | 2026-06-08 | 2026-06-08 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Nextcloud | Contacts | 3.4.1 | |||
| Application | Nextcloud | Contacts | 3.4.0 | |||
| Application | Nextcloud | Contacts | 3.3.0 | |||
| Application | Nextcloud | Contacts | 3.2.0 | |||
| Application | Nextcloud | Contacts | 3.1.9 | |||
| Application | Nextcloud | Contacts | 3.1.8 | |||
| Application | Nextcloud | Contacts | 3.1.7 | |||
| Application | Nextcloud | Contacts | 3.1.6 | |||
| Application | Nextcloud | Contacts | 3.1.5 | |||
| Application | Nextcloud | Contacts | 3.1.4 | |||
| Application | Nextcloud | Contacts | 3.1.3 | |||
| Application | Nextcloud | Contacts | 3.1.2 | |||
| Application | Nextcloud | Contacts | 3.1.1 | |||
| Application | Nextcloud | Contacts | 3.1.0 | |||
| Application | Nextcloud | Contacts | 3.0.5 | |||
| Application | Nextcloud | Contacts | 3.0.4 | |||
| Application | Nextcloud | Contacts | 3.0.3 | |||
| Application | Nextcloud | Contacts | 3.0.2 | |||
| Application | Nextcloud | Contacts | 3.0.1 | |||
| Application | Nextcloud | Contacts | 3.0.0 |