VulnerabilitiesAttackers plant web shells on Nextcloud servers through Collabora CODE app flaw
A bug in Nextcloud's built-in Collabora Online CODE Server lets attackers run commands as the web server user. Admins started reporting live attacks on September 10.