Companies

Nextcloud

Follow the latest coverage, related explainers and connected technology stories.

Latest coverage

CN
Attacks Exploit Command Execution Vulnerability in Collabora to Plant Backdoors on Nextcloud Servers

Attacks Exploit Command Execution Vulnerability in Collabora to Plant Backdoors on Nextcloud Servers

Attackers are exploiting a critical command execution vulnerability in the Collabora Online - Built-in CODE Server app for Nextcloud and have planted malicious PHP software to search for password databases and cryptocurrency wallets. Administrators should update to version 26.4.303 or later, or remove the app, as disabling it alone is insufficient.