TGViewer
The Hacker News The Hacker News @thehackernews · 163K subscribers
Post #10337 6.02K
‼️ Attackers planted PHP web shells on Nextcloud servers via Collabora's Built-in CODE app (CVE-2026-110447).

Catch >> Disabling the app does NOT close the flaw. Exploitation requires its local document server to be down.

Update to 26.4.303+ or remove it.

Read: https://thehackernews.com/2026/10/hackers-backdoor-nextcloud-servers.html
  • 👍 3
  • 🔥 3
  • 😁 3
Open in Telegram All posts from @thehackernews
More from @thehackernews
  1. Oct 16, 2026‼️ A 37-year-old BSD bug can still help gain root on OpenBSD 7.9. Researchers released a l…
  2. Oct 16, 2026‼️ NEW - Attackers tampered with AOMEI Backupper’s update servers in 5–10-minute bursts, d…
  3. Oct 16, 2026🚨 UAT-11985 is targeting Taiwan research affiliates with fake event invitations and tampe…
  4. Oct 16, 2026“Mitigated” doesn't always mean the threat is gone. In 2025 SOC data, live memory scans fo…
  5. Oct 16, 2026⚠️ An OpenAI research model spent test ETH from a third-party wallet without permission to…
  6. Oct 16, 2026Get more time to revisit course labs after training ends, and a clearer shot at your next…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →