Nextcloud Talk vulnerabilities

2 CVEs affecting Nextcloud Talk, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-26041, published 2023-02-27.

More from Nextcloud.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-41971, published 2022-12-01. Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days. Nextcould Talk android is a video and audio conferencing app for Nextcloud. Prior to versions 12.2.8, 13.0.10, 14.0.6, and 15.0.0, guests can continue to receive video streams from a call after being…
• CVE-2023-26041, published 2023-02-27. Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days. Nextcloud Talk is a fully on-premises audio/video and chat communication service. When cron jobs were misconfigured and therefore messages are not expired, the API would still return them while they…