Vulnerabilities
Nextcloud richdocumentscode flaw grants unauthenticated RCE on servers with stopped CODE
Attackers gain system command execution on Nextcloud servers via a flaw in the Collabora app, requiring no login credentials.
Nextcloud
Everything RedTeam Log has reported about Nextcloud: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Collabora Online CODE Server Restart Command Injection Enables Full System Control
Attackers exploited a command injection bug in the built-in server during restarts, gaining full control of affected Nextcloud systems.