CVE-2022-41926

Nextcould talk android is the android OS implementation of the nextcloud talk chat system. In affected versions the receiver is not protected by broadcastPermission allowing malicious apps to monitor communication. It is recommended that the Nextcloud Talk Android is upgraded to 14.1.0. There are no known workarounds for this issue.

• CWE-200
• CWE-732

• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-564v-3rfc-352mThird Party Advisory
• https://github.com/nextcloud/talk-android/pull/2148Patch, Third Party Advisory
• https://hackerone.com/reports/1596459Permissions Required, Third Party Advisory
• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-564v-3rfc-352mThird Party Advisory
• https://github.com/nextcloud/talk-android/pull/2148Patch, Third Party Advisory
• https://hackerone.com/reports/1596459Permissions Required, Third Party Advisory

Published

Nov 25, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-41920Lancet is a general utility library for the go programming l…8.8
• CVE-2022-41921Discourse is an open-source discussion platform. Prior to ve…4.3
• CVE-2022-41922`yiisoft/yii` before version 1.1.27 are vulnerable to Remote…9.8
• CVE-2022-41923Grails Spring Security Core plugin is vulnerable to privileg…9.8
• CVE-2022-41924A vulnerability identified in the Tailscale Windows client a…9.6
• CVE-2022-41925A vulnerability identified in the Tailscale client allows a …8.8
• CVE-2022-41927XWiki Platform is vulnerable to Cross-Site Request Forgery (…7.4
• CVE-2022-41928XWiki Platform vulnerable to Improper Neutralization of Dire…8.8
• CVE-2022-41929org.xwiki.platform:xwiki-platform-oldcore is missing authori…4.9
• CVE-2022-4193Insufficient policy enforcement in File System API in Google…8.8
• CVE-2022-41930org.xwiki.platform:xwiki-platform-user-profile-ui is missing…8.2
• CVE-2022-41931xwiki-platform-icon-ui is vulnerable to Improper Neutralizat…8.8