Collabora Online Built-in CODE Server (NextCloud): Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Benutzerrechten
NEOSEC enrichment — no mirror of the original source
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Collabora Collabora Online ausnutzen, um beliebigen Programmcode als Webserver-Benutzer auszuführen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Criticalbsi:WID-SEC-2026-40111 linked CVE
Open advisory with all CVEs
More on NextCloud
Other advisories
- Not ratedosv:CLEANSTART-2024-WQ64584Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud
- Not ratedosv:CLEANSTART-2024-CR33815Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server
- Not ratedosv:CLEANSTART-2024-AL46857Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server
- Not ratedosv:CLEANSTART-2024-XX39699Nextcloud is an open-source productivity platform
- Not ratedosv:CLEANSTART-2026-JP77981Security fix for GHSA-gq4g-fpc9-vjfq applied in: nextcloud 32.0.3-r0
- HighCVE-2026-82983Nextcloud (Server, Tables, Whiteboard, Files Confidential, Collectives, Richdocuments): Mehrere Schwachstellen
- HighCVE-2026-104189Maz1987in 3Dviewer-Nextcloud: fehlende Authentifizierung für kritische Funktion
- MediumCVE-2026-82984Nextcloud Server: unzureichende Zugriffskontrolle
Other news entries
- Nextcloud (Server, Tables, Whiteboard, Files Confidential, Collectives, Richdocuments): Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Nextcloud (Server, Tables, Whiteboard, Files Confidential, Collectives, Richdocuments): Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Multiples vulnérabilités dans les produits Nextcloud (27 octobre 2026)NewsCERT-FR (ANSSI)
- Hackers exploit Collabora RCE flaw to backdoor Nextcloud serversNewsBleepingComputer
- Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE AppNewsThe Hacker News
- Nextcloud: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Multiples vulnérabilités dans les produits Nextcloud (09 octobre 2026)NewsCERT-FR (ANSSI)
- Nextcloud: Schwachstelle ermöglicht CodeausführungVulnerabilityBSI CERT-Bund
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4011
ID