Known Vulnerabilities for Flow by Nextcloud
Listed below are 1 of the newest known vulnerabilities associated with "Flow" by "Nextcloud".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-43034 json | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: set backing store type from query type bnxt_hw... | Not Provided | 2026-05-01 | 2026-05-01 |
| CVE-2026-43013 json | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: lag: Check for LAG device before creating debu... | Not Provided | 2026-05-01 | 2026-05-01 |
| CVE-2026-42809 json | Apache Polaris can issue broad temporary ("vended") storage credentials during staged table creation before the effective tab... | Not Provided | 2026-05-04 | 2026-05-04 |
| CVE-2026-42221 json | Nginx UI is a web user interface for the Nginx web server. From version 2.0.0 to before version 2.3.8, an unauthenticated net... | Not Provided | 2026-05-04 | 2026-05-05 |
| CVE-2026-42090 json | Notesnook is a note-taking app focused on user privacy & ease of use. Prior to Notesnook Web/Desktop version 3.3.15 and prior... | Not Provided | 2026-05-04 | 2026-05-04 |
| CVE-2026-42040 json | Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, the encode() function in lib/he... | Not Provided | 2026-04-24 | 2026-04-27 |
| CVE-2026-41940 json | cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthentica... | Not Provided | 2026-04-29 | 2026-05-04 |
| CVE-2026-41429 json | arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers. Prior t... | Not Provided | 2026-04-24 | 2026-04-27 |
| CVE-2026-41426 json | pretalx is a conference planning tool. Prior to 2026.1.0, an unauthenticated attacker can send arbitrary HTML-rendered emails... | Not Provided | 2026-04-24 | 2026-04-25 |
| CVE-2026-41377 json | OpenClaw before 2026.3.31 contains a fail-open vulnerability in the plugin installation flow where security scan failures do ... | Not Provided | 2026-04-28 | 2026-04-29 |