Attackers Backdoor Nextcloud Servers via Collabora Online Built-in CODE Server Flaw
RedSide Security October 15, 2026 Vulnerability 5 views
Attackers exploited a critical flaw in Nextcloud's optional Collabora Online Built-in CODE Server app to plant web shells, with the first attack logged on September 10. Administrators are urged to check for the app and hunt for compromise.
Continue reading: Attackers Backdoor Nextcloud Servers via Collabora…