Nextcloud Security Scanner & Release Schedule?

[wwe]

Nexcloud security scanner keeps old results forever

Scan.nextcloud.com gives an A+ for a Nextcloud server with EOL version 24

I use icinga2 for monitoring various servers. One of the checks scans various Nextcloud versions for vulnerabilities via scan.nextcloud.com. I noticed that a Nextcloud version that I forgot to update still gets an A+ rating, even though Nextcloud version 24 is EOL or EOS. This makes the Security Scanner pretty useless. [screenshot]

take a look at “Scanned at…” and don’t forget to hit [trigger re-scan] button

Nextcloud Security Scan vs Installed Version mismatch

Hi, could someone please use the security scan with Nextcloud 25.0.5 which is available through internet and report their result? [image] [image]

How to maintain, check and improve the security of your Nextcloud installation?

Welcome to the Wiki. you are welcome to improve and extend this post You Nextcloud likely contains work and data you don’t want others can access to. There is not absolute security but you can follow some general measures to verify if you system is secure enough and doesn’t offer easy target to bad actors. update your system frequently the most important security measure is frequent updating. Often update include bug fixes and close security holes existed in previous versions. At th…