CVE-2024-37314: Nextcloud Server

Low severity, CVSS 3.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Nextcloud Photos is a photo management app. Users can remove photos from the album of registered users. It is recommended that the Nextcloud Server is upgraded to 25.0.7 or 26.0.2 and the Nextcloud Enterprise Server is upgraded to 25.0.7 or 26.0.2.

Affected products

• Nextcloud Nextcloud Server: from 25.0.0, before 25.0.7 (fixed in 25.0.7); from 26.0.0, before 26.0.2 (fixed in 26.0.2)

Published 2024-06-14. Last modified 2026-06-17.