CVE-2025-66556: Nextcloud talk is a video & audio conferencing app for Nextcloud. Prior to 20.1.8 and 21.1.2, a participant with chat permissions was able to delete poll…

PriorityP420medium4.3CVSS 3.1

AVNACLPRLUINSUCNILAN

EPSS

0.21%

10.8th percentile

Nextcloud talk is a video & audio conferencing app for Nextcloud. Prior to 20.1.8 and 21.1.2, a participant with chat permissions was able to delete poll drafts of other participants within the conversation based on their numeric ID. This vulnerability is fixed in 20.1.8 and 21.1.2.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
nextcloud	security-advisories	< 20.1.8	20.1.8
nextcloud	security-advisories	—	—
nextcloud	talk	>= 20.0.0 < 20.1.8	20.1.8
nextcloud	talk	>= 21.0.0 < 21.1.2	21.1.2

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.