CVE-2025-66558Low· 3.1▾ SunlitNextcloud Twofactor WebAuthn is the WebAuthn Two-Factor Provider for Nextcloud. Prior to 1.4.2 and 2.4.1, a missing ownership check allowed an attack to take-away a 2FA webauthn device when correctly guessing a 80-128 character long rand…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 17.1 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 27.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.3%
Nextcloud Twofactor WebAuthn is the WebAuthn Two-Factor Provider for Nextcloud. Prior to 1.4.2 and 2.4.1, a missing ownership check allowed an attack to take-away a 2FA webauthn device when correctly guessing a 80-128 character long random string of letters, numbers and symbols. The victim would then be prompted to register a new device on the next login. The attacker can not authenticate as the victim. This vulnerability is fixed in 1.4.2 and 2.4.1.
two-factor_webauthn >= 1.0.0, < 1.4.2two-factor_webauthn >= 2.0.0, < 2.4.1Upgrade past the affected range:
two-factor_webauthn 2.4.1Connected by shared product, vendor, weakness, or advisory.
CVE-2025-66556Low· 3.5Nextcloud talk is a video & audio conferencing app for Nextcloud
CVE-2025-66553Medium· 4.3Nextcloud Tables allows you to create your own tables with individual columns
CVE-2025-66513Medium· 4.3Nextcloud Tables allows you to create your own tables with individual columns
CVE-2025-64011Medium· 4.3Nextcloud Server 30.0.0 is vulnerable to an Insecure Direct Object Reference (IDOR) in the /core/preview endpoint
CVE-2025-66551Medium· 6.3Nextcloud Tables allows you to create your own tables with individual columns
CVE-2026-68493Low· 3.1After guessing a 62^15 complex unique identifier, a malicious logged in user was able to retrieve a list of memberships for a circle they are not a member of.