Vendor
Nextcloud
- First Reported
- Oct 14, 2026
- Latest Reported
- Oct 14, 2026
Reported Context (1)
- Attackers exploited a flaw in an optional Nextcloud app, Collabora Online - Built-in CODE Server, to plant web shells on Nextcloud servers. Three administrators reported the issue on GitHub, with the first logged attack Flaw in Nextcloud’s Built-in Collabora CODE App Exploited to Plant Web Shells
CVE (2)
People (3)
MITRE ATT&CK (5)
Vendors (1)
Products (4)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.