Cyber Attacks
Update Nextcloud Collabora App to Stop Remote Code Execution
Attackers used a flaw in the built-in CODE server to install web shells. A patch is available, but disabling the app does not stop the risk.
Nextcloud
Everything Patch Review has reported about Nextcloud: 2 stories, newest first. Part of our Cyber Attacks coverage.
Vulnerabilities
Urgent: Upgrade Collabora Online to 26.4.303 to Patch Actively Exploited Command Injection
Attackers are exploiting a critical command injection flaw in Collabora Online’s built-in CODE Server. Users must upgrade to version 26.4.303 or later immediately.