Skip to content
English

Products › Brands

Brand

ownCloud: actively exploited vulnerabilities

2 vulnerabilities in ownCloud products (ownCloud Server) are in CISA’s catalog of exploited vulnerabilities, 1 of them added in the last 90 days. Last added: August 27, 2026.

By category

Add just one ownCloud category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

  • ownCloud Server 2 vulnerabilities · File transfer (MFT)

Name used by CISA: ownCloud. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this ownCloud list.

  1. Rank 1ownCloud Server

    CVE-2023-49105

    Hunt for compromise (CISA)CVE from 2023, added in 2026

    ownCloud Improper Authentication Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Aug 27, 2026
    CISA deadline
    3 days
    CVSS severity
    9.8 (critical)
  2. Rank 2ownCloud Server

    CVE-2023-49103

    ownCloud graphapi Information Disclosure Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 30, 2023
    CISA deadline
    21 days
    CVSS severity
    7.5 (high)

Follow and verify

Indicative classification, based on the vendor and product names given by CISA. How products are classified.