H1 HackerOne LIVE
Nextcloud
pays bountiesTABLE ↗
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- https://nextcloud.com
- managed triage
- no
- response efficiency
- 100%
- first response
- 13h avg
- time to bounty
- 4579h avg
94 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
apps.nextcloud.com | domain | no | critical | 2026-09-20 |
auth.nextcloud.com | domain | no | critical | 2026-09-20 |
crm.nextcloud.com | domain | no | critical | 2026-09-20 |
customerupdates.nextcloud.com | domain | no | critical | 2026-09-20 |
docs.nextcloud.com | domain | no | critical | 2026-09-20 |
download.nextcloud.com | domain | no | critical | 2026-09-20 |
help.nextcloud.com | domain | no | critical | 2026-09-20 |
knowledge.nextcloud.com | domain | no | critical | 2026-09-20 |
lists.nextcloud.com | domain | no | critical | 2026-09-20 |
logs.nextcloud.com | domain | no | critical | 2026-09-20 |
lookup.nextcloud.com | domain | no | critical | 2026-09-20 |
newsletter.nextcloud.com | domain | no | low | 2026-09-20 |
nextcloud.com | domain | no | critical | 2026-09-20 |
portal.nextcloud.com | domain | no | critical | 2026-09-20 |
projects.nextcloud.com | domain | no | critical | 2026-09-20 |
push-notifications.nextcloud.com | domain | no | critical | 2026-09-20 |
pushfeed.nextcloud.com | domain | no | low | 2026-09-20 |
scan.nextcloud.com | domain | no | critical | 2026-09-20 |
static.apps.nextcloud.com | domain | no | critical | 2026-09-20 |
stats.nextcloud.com | domain | no | critical | 2026-09-20 |
support.nextcloud.com | domain | no | critical | 2026-09-20 |
surveyserver.nextcloud.com | domain | no | critical | 2026-09-20 |
updates.nextcloud.com | domain | no | critical | 2026-09-20 |
usercontent.apps.nextcloud.com | domain | no | critical | 2026-09-20 |
Desktop Client | executable | no | critical | 2026-09-20 |
com.nextcloud.Talk | mobile | no | medium | 2026-09-20 |
com.nextcloud.client | mobile | no | medium | 2026-09-20 |
com.nextcloud.talk2 | mobile | no | medium | 2026-09-20 |
com.peterandlinda.iOCNotes | mobile | no | critical | 2026-09-20 |
it.niedermann.owncloud.notes | mobile | no | medium | 2026-09-20 |
it.twsweb.Nextcloud | mobile | no | medium | 2026-09-20 |
https://github.com/nextcloud/collectives | source code | no | critical | 2026-09-20 |
https://github.com/nextcloud/files_confidential | source code | no | critical | 2026-09-20 |
https://github.com/nextcloud/tables | source code | no | critical | 2026-09-20 |
https://github.com/roundcube/roundcubemail | source code | no | critical | 2026-09-20 |
nextcloud/3rdparty | source code | no | critical | 2026-09-20 |
nextcloud/activity | source code | no | critical | 2026-09-20 |
nextcloud/approval | source code | no | critical | 2026-09-20 |
nextcloud/bruteforcesettings | source code | no | critical | 2026-09-20 |
nextcloud/calendar | source code | no | critical | 2026-09-20 |
nextcloud/calendar_resource_management | source code | no | critical | 2026-09-20 |
nextcloud/circles | source code | no | critical | 2026-09-20 |
nextcloud/contacts | source code | no | critical | 2026-09-20 |
nextcloud/data_request | source code | no | critical | 2026-09-20 |
nextcloud/deck | source code | no | critical | 2026-09-20 |
nextcloud/end_to_end_encryption | source code | no | critical | 2026-09-20 |
nextcloud/external | source code | no | critical | 2026-09-20 |
nextcloud/files_accesscontrol | source code | no | critical | 2026-09-20 |
nextcloud/files_antivirus | source code | no | critical | 2026-09-20 |
nextcloud/files_automatedtagging | source code | no | critical | 2026-09-20 |
nextcloud/files_fulltextsearch | source code | no | critical | 2026-09-20 |
nextcloud/files_fulltextsearch_tesseract | source code | no | critical | 2026-09-20 |
nextcloud/files_lock | source code | no | critical | 2026-09-20 |
nextcloud/files_pdfviewer | source code | no | critical | 2026-09-20 |
nextcloud/files_retention | source code | no | critical | 2026-09-20 |
nextcloud/files_rightclick | source code | no | critical | 2026-09-20 |
nextcloud/files_texteditor | source code | no | critical | 2026-09-20 |
nextcloud/firstrunwizard | source code | no | critical | 2026-09-20 |
nextcloud/flow_notifications | source code | no | critical | 2026-09-20 |
nextcloud/fulltextsearch | source code | no | critical | 2026-09-20 |
nextcloud/fulltextsearch_elasticsearch | source code | no | critical | 2026-09-20 |
nextcloud/globalsiteselector | source code | no | critical | 2026-09-20 |
nextcloud/groupfolders | source code | no | critical | 2026-09-20 |
nextcloud/guests | source code | no | critical | 2026-09-20 |
nextcloud/logreader | source code | no | critical | 2026-09-20 |
nextcloud/mail | source code | no | critical | 2026-09-20 |
nextcloud/nextcloud_announcements | source code | no | critical | 2026-09-20 |
nextcloud/notes | source code | no | critical | 2026-09-20 |
nextcloud/notifications | source code | no | critical | 2026-09-20 |
nextcloud/notify_push | source code | no | critical | 2026-09-20 |
nextcloud/password_policy | source code | no | critical | 2026-09-20 |
nextcloud/photos | source code | no | critical | 2026-09-20 |
nextcloud/preferred_providers | source code | no | critical | 2026-09-20 |
nextcloud/privacy | source code | no | critical | 2026-09-20 |
nextcloud/recommendations | source code | no | critical | 2026-09-20 |
nextcloud/related_resources | source code | no | critical | 2026-09-20 |
nextcloud/richdocuments | source code | no | critical | 2026-09-20 |
nextcloud/server | source code | no | critical | 2026-09-20 |
nextcloud/serverinfo | source code | no | critical | 2026-09-20 |
nextcloud/sharepoint | source code | no | critical | 2026-09-20 |
nextcloud/socialsharing | source code | no | critical | 2026-09-20 |
nextcloud/spreed | source code | no | critical | 2026-09-20 |
nextcloud/survey_client | source code | no | critical | 2026-09-20 |
nextcloud/suspicious_login | source code | no | critical | 2026-09-20 |
nextcloud/terms_of_service | source code | no | critical | 2026-09-20 |
nextcloud/text | source code | no | critical | 2026-09-20 |
nextcloud/twofactor_totp | source code | no | critical | 2026-09-20 |
nextcloud/twofactor_webauthn | source code | no | critical | 2026-09-20 |
nextcloud/updater | source code | no | critical | 2026-09-20 |
nextcloud/user_migration | source code | no | critical | 2026-09-20 |
nextcloud/user_oidc | source code | no | critical | 2026-09-20 |
nextcloud/user_saml | source code | no | critical | 2026-09-20 |
nextcloud/viewer | source code | no | critical | 2026-09-20 |
nextcloud/workflow_script | source code | no | critical | 2026-09-20 |
8 out of scope — black ICE, don't touch
cloud.nextcloud.comdomainconf.nextcloud.comdomaindemo.nextcloud.comdomaindrone.nextcloud.comdomainhttps://nextcloud.atlassian.net/jira/dashboarddomainsentry.nextcloud.comdomaintry.nextcloud.comdomaindaita/files_fulltextsearch_tesseractsource code
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.