Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Attackers exploited a flaw in an optional Nextcloud app, Collabora Online - Built-in CODE Server, to plant web shells on Nextcloud servers. Three administrator…
Multiple vulnerabilities were discovered in nextcloud-desktop, nextcloud folder synchronization tool. CVE-2022-39331
Updated nextcloud packages fix security vulnerability: A bug in Nextcloud Server causes the workflow rules to depend their behavior on the file extension when…
Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - Built-in CODE Server app (richdocumen…
The Fedora 43 update for NextCloud version 34.0.3 addresses multiple security vulnerabilities including XSS and prototype pollution, enhancing the file sync an…
Fedora 44 has released an update for NextCloud version 34.0.3, addressing multiple security vulnerabilities including cross-site scripting and prototype pollut…
Fedora 43 has updated Nextcloud to version 34.0.2, enhancing file synchronization capabilities while addressing security flaws related to URI host validation i…
Fedora 44 has updated NextCloud to version 34.0.2, offering file syncing and sharing, with improvements and bug fixes related to security flaws and enhancement…
Multiple vulnerabilities have been found in Nextcloud, the worst of which could result in denial of service.
Two vulnerabilities were discovered in the Nextcloud desktop client, which could result in information disclosure. For the oldstable distribution (buster), the…
A vulnerability in Nextcloud Desktop Client could allow a remote attacker to execute arbitrary commands.
Multiple vulnerabilities have been found in Nextcloud Desktop Sync client, the worst of which may allow execution of arbitrary code.
32.0.2 release RHBZ#2416087 RHBZ#2415750 RHBZ#2415751 RHBZ#2415752 RHBZ#2415753
31.0.9 release RHBZ#2388493 RHBZ#2389830 RHBZ#2389831 RHBZ#2389842 RHBZ#2389843 RHBZ#2389814 RHBZ#2389815
31.0.9 release RHBZ#2388493 RHBZ#2389830 RHBZ#2389831 RHBZ#2389842 RHBZ#2389843 RHBZ#2389814 RHBZ#2389815
An update that fixes 5 vulnerabilities is now available.
An update that fixes three vulnerabilities is now available.
An update that fixes one vulnerability is now available.
Multiple one-click vulnerabilities have been discovered across a variety of popular software applications, allowing an attacker to potentially execute arbitrar…
