Tag: Nextcloud

  • Collabora RCE Flaw Exploited to Backdoor Nextcloud Servers

    Collabora RCE Flaw Exploited to Backdoor Nextcloud Servers

    Attackers are exploiting a Collabora RCE flaw to compromise Nextcloud installations running the optional Built-in CODE Server app. Administrator reports describe PHP webshells and searches for password databases, password manager files and cryptocurrency wallets. The vulnerability, tracked as CVE-2026-110447, affects app versions earlier than 26.4.303. Reports place malicious activity as early as September 10, more…

  • Nextcloud Data Leak Exposes 367,000 Internal Records After Hosting Error

    Nextcloud Data Leak Exposes 367,000 Internal Records After Hosting Error

    A Nextcloud data leak exposed around 367,000 internal records after a hosting misconfiguration left an Elasticsearch database publicly accessible. The leaked data included invoices, contracts, employee information, emails, and infrastructure scripts. Researchers discovered the exposed database on May 18. Nextcloud secured it two days after receiving a responsible disclosure report. The company says the incident…