Talk

This hub aggregates every CVE we track for Talk, a product in the cloud saas space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Talk.

• CVE-2025-66556Nextcloud talk allows participants to blindly delete poll drafts of other users by ID3.5Dec 5, 2025
• CVE-2023-45149Password of talk conversations can be bruteforced in Nextcloud4.3Oct 16, 2023
• CVE-2023-39957Path traversal allows tricking the Talk Android app into writing files into it's root directory7.8Aug 10, 2023
• CVE-2023-30540Chat poll data can still be queried from API after purging history in Nextcloud talk3.5Apr 17, 2023
• CVE-2023-28845Chat room membership disclosed via autocompletion in Nextcloud talk3.5Mar 31, 2023
• CVE-2023-22473Passcode bypass on Talk-Android app2.1Jan 9, 2023
• CVE-2022-41926Nextcloud Talk Android broadcast incorrect permission handling3.3Nov 25, 2022
• CVE-2022-39212Last video frame is still sent after video is disabled in a call in Nextcloud Talk4.3Sep 16, 2022
• CVE-2022-35932Missing rate limit when trying to join a password protected Nextcloud Talk conversation3.5Aug 12, 2022
• CVE-2022-24890Exposure of Private Personal Information to an Unauthorized Actor in Nextcloud Talk2.4May 17, 2022
• CVE-2022-24887Open Redirect in Nextcloud Talk4.3Apr 27, 2022
• CVE-2021-41181Nextcloud Talk app exposes chat messages on lockscreen2.4Mar 8, 2022
• CVE-2021-41180Geolocation preview links can be set to arbitrary links in nextcloud talk4.7Mar 8, 2022
• CVE-2021-39222XSS in Talk6.4Nov 15, 2021
• CVE-2021-32689Nextcloud Talk not properly disassociating users from chats after account deletion8.1Jul 12, 2021