Vulnerability Database

314,496

Total vulnerabilities in the database

CVE-2025-66556

Nextcloud talk is a video & audio conferencing app for Nextcloud. Prior to 20.1.8 and 21.1.2, a participant with chat permissions was able to delete poll drafts of other participants within the conversation based on their numeric ID. This vulnerability is fixed in 20.1.8 and 21.1.2.

  • Published: Dec 5, 2025
  • Updated: Dec 6, 2025
  • CVE: CVE-2025-66556
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 3.5
  • AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
nextcloud / talk 20.0.0 20.1.8
nextcloud / talk 21.0.0 21.1.2