CVE-2023-49790: Nextcloud

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

The Nextcloud iOS Files app allows users of iOS to interact with Nextcloud, a self-hosted productivity platform. Prior to version 4.9.2, the application can be used without providing the 4 digit PIN code. Nextcloud iOS Files app should be upgraded to 4.9.2 to receive the patch. No known workarounds are available.

Affected products

• Nextcloud Nextcloud: before 4.9.2 (fixed in 4.9.2)

Published 2023-12-22. Last modified 2026-06-17.