All 1 CVE vulnerabilities found in nextcloud-mcp-server, with AI-generated Chinese analysis, references, and POCs.
Vendor: cbcoutinho
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-55640 | Nextcloud MCP Server: Unauthenticated `POST /webhooks/nextcloud` allows arbitrary vector data deletion when `WEBHOOK_SECRET` is unset ( default ) CWE-306 | 9.1 | Critical | 2026-08-25 |
All 1 known CVE vulnerabilities affecting nextcloud-mcp-server with full Chinese analysis, references, and POCs where available.