negativeSYS.SOURCE: The Hacker News• 2026-10-14T23:08:31+05:30

Critical Vulnerability in Collabora Online's CODE App Enables Web Shell Exploitation on Nextcloud Servers

#vulnerability #web-shell #nextcloud

Attackers exploited a critical vulnerability in the Collabora Online - Built-in CODE Server app to deploy web shells on Nextcloud servers, granting unauthorized access. The flaw was reported on GitHub with the first confirmed attack occurring on September 10.

Attackers exploited a flaw in an optional Nextcloud app, Collabora Online - Built-in CODE Server, to plant web shells on Nextcloud servers. Three administrators reported the issue on GitHub, with the first logged attack on September 10.

A web shell is a small file that executes any command an attacker sends via a web request, with the rights of the web server account. The flaw

Read original article

*** END OF TRANSMISSION ***

> ANTHROPIC'S SCION VERSION CONTROL SYSTEM INSPIRED BY MONONOKE OPEN-SOURCE PROJECT > YANDEX OUTAGE REVEALS MALICIOUS BOT ACTIVITY SHIFT DURING DOWNTIME > FLOCK CEO CLARIFIES NO POLICE DEPARTMENTS TERMINATED AS CUSTOMERS OVER ABUSE CONCERNS > U.S. ELECTRIC VEHICLE SALES SHOW RECOVERY AFTER MARKET DOWNTURN > TIMETELLER'S CIRCADIAN RHYTHM TEST ADVANCES PERSONALIZED CANCER TREATMENT > AMBROSIA ENERGY CONSTRUCTS 10 GWH BATTERY PLANT IN TEXAS FOR OFF-GRID DATA CENTER POWER SOLUTIONS > IMPLEMENTING TERMINAL-OPTIMIZED WEB CONTENT USING ANSI ESCAPE CODES AND CUSTOM STATIC SITE GENERATION > CANCER DIAGNOSIS IN 2026: KEY INSIGHTS AND STRATEGIES > SURGE IN SUICIDE RATES OBSERVED AMONG MIDDLE-AGED MALE POPULATION > HIYD: A NON-INTRUSIVE HEALTH TRACKING DEVICE FOR EXISTING WATCHES> ANTHROPIC'S SCION VERSION CONTROL SYSTEM INSPIRED BY MONONOKE OPEN-SOURCE PROJECT > YANDEX OUTAGE REVEALS MALICIOUS BOT ACTIVITY SHIFT DURING DOWNTIME > FLOCK CEO CLARIFIES NO POLICE DEPARTMENTS TERMINATED AS CUSTOMERS OVER ABUSE CONCERNS > U.S. ELECTRIC VEHICLE SALES SHOW RECOVERY AFTER MARKET DOWNTURN > TIMETELLER'S CIRCADIAN RHYTHM TEST ADVANCES PERSONALIZED CANCER TREATMENT > AMBROSIA ENERGY CONSTRUCTS 10 GWH BATTERY PLANT IN TEXAS FOR OFF-GRID DATA CENTER POWER SOLUTIONS > IMPLEMENTING TERMINAL-OPTIMIZED WEB CONTENT USING ANSI ESCAPE CODES AND CUSTOM STATIC SITE GENERATION > CANCER DIAGNOSIS IN 2026: KEY INSIGHTS AND STRATEGIES > SURGE IN SUICIDE RATES OBSERVED AMONG MIDDLE-AGED MALE POPULATION > HIYD: A NON-INTRUSIVE HEALTH TRACKING DEVICE FOR EXISTING WATCHES