CVE-2021-32658

Nextcloud Android is the Android client for the Nextcloud open source home cloud system. Due to a timeout issue the Android client may not properly clean all sensitive data on account removal. This could include sensitive key material such as the End-to-End encryption keys. It is recommended that the Nextcloud Android App is upgraded to 3.16.1

• CWE-200
• CWE-212

• https://github.com/nextcloud/android/commit/355f3c745b464b741b20a3b96597303490c26333Patch, Third Party Advisory
• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-g5gf-rmhm-wpxwThird Party Advisory
• https://hackerone.com/reports/1189168Exploit, Patch, Third Party Advisory
• https://github.com/nextcloud/android/commit/355f3c745b464b741b20a3b96597303490c26333Patch, Third Party Advisory
• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-g5gf-rmhm-wpxwThird Party Advisory
• https://hackerone.com/reports/1189168Exploit, Patch, Third Party Advisory

Published

Jun 8, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-32652Nextcloud Mail is a mail app for the Nextcloud platform. A m…4.3
• CVE-2021-32653Nextcloud Server is a Nextcloud package that handles data st…2.7
• CVE-2021-32654Nextcloud Server is a Nextcloud package that handles data st…9.1
• CVE-2021-32655Nextcloud Server is a Nextcloud package that handles data st…3.5
• CVE-2021-32656Nextcloud Server is a Nextcloud package that handles data st…8.6
• CVE-2021-32657Nextcloud Server is a Nextcloud package that handles data st…4.3
• CVE-2021-32659Matrix-appservice-bridge is the bridging service for the Mat…4.9
• CVE-2021-32660Backstage is an open platform for building developer portals…8.1
• CVE-2021-32661Backstage is an open platform for building developer portals…7.3
• CVE-2021-32662Backstage is an open platform for building developer portals…6.5
• CVE-2021-32663iTop is an open source web based IT Service Management tool.…7.5
• CVE-2021-32664Combodo iTop is an open source web based IT Service Manageme…4.8