CVE-2025-66208

Reported Context (1)

or remove the app. Collabora's fix for a separate command-injection flaw in the same script, CVE-2025-66208, disclosed last December, does not prevent this one. Flaw in Nextcloud’s Built-in Collabora CODE App Exploited to Plant Web Shells

CVE (1)

People (3)

MITRE ATT&CK (5)

Vendors (2)

Products (4)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.