Malware

Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App

October 14, 2026 1 min read 1 views
cybersecurity threats news
Attackers exploited a flaw in an optional Nextcloud app, Collabora Online - Built-in CODE Server, to plant web shells on Nextcloud servers. Three administrators reported the issue on GitHub, with the first logged attack on September 10. A web shell is a small file that executes any command an attacker sends via a web request, with the rights of the web server account. The flaw

Was this article helpful?

0 found this helpful

Related Articles

Hirudo Android Trojan Uses Patched Banking Apps to Bypass Their Built-In Security Checks

1 min read

Hirudo Android malware replaces banking apps to evade security checks

4 min read

Anthropic Warns Small AI Models Could Soon Form Self-Propagating IoT Botnets

1 min read

Ready to protect your organization?

Get started with Phishlens and run your first phishing simulation today.

Schedule a Demo