/* Route-Critical (index, V6 §3.6.3 — erzeugt von tools/generate_critical_css.mjs) */ .collapse:not(.show){display:none}.navbar{display:flex;flex-wrap:wrap;align-items:center;justify-content:space-between}.navbar>.container-fluid{display:flex;flex-wrap:inherit;align-items:center;justify-content:space-between}.mydraft-svg-icon{display:inline-block;vertical-align:middle;color:currentcolor;flex-shrink:0;transition:color var(--duration-fast, 150ms) ease,stroke var(--duration-fast, 150ms) ease,fill var(--duration-fast, 150ms) ease}.mydraft-svg-icon circle,.mydraft-svg-icon line,.mydraft-svg-icon path,.mydraft-svg-icon polygon,.mydraft-svg-icon polyline,.mydraft-svg-icon rect{transition:stroke var(--duration-fast, 150ms) ease,fill var(--duration-fast, 150ms) ease}@layer components{.live-pulse-dot{width:8px;height:8px}}.min-w-0{min-width:0}@layer overrides{.live-radar-header-badge{background:rgba(239,68,68,.12);border:1px solid rgba(239,68,68,.35);color:#fca5a5;font-size:.75rem;font-weight:700;transition:.25s;cursor:pointer}}@layer overrides{.live-pulse-dot{width:8px;height:8px;background-color:var(--threat-critical,#ef4444);border-radius:50%;display:inline-block;box-shadow:rgba(239,68,68,.7) 0 0 0 0}}@layer overrides{body.light .live-radar-header-badge,html[data-bs-theme=light] .live-radar-header-badge{background:#fbd9dd;border-color:#eeb2b8;color:#8a1723!important}}.isharestuff-live-ticker{color:var(--color-text-body,#f8fafc);backdrop-filter:none;flex-wrap:wrap;row-gap:.3rem;background:var(--color-surface,rgba(15,23,42,.85))!important;border:1px solid var(--color-border,rgba(255,255,255,.12))!important;padding:.45rem .5rem!important;margin-bottom:.75rem!important}.ticker-content{mask-image:linear-gradient(to right,transparent 0px,rgb(0,0,0) 14px,rgb(0,0,0) calc(100% - 14px),transparent 100%);touch-action:pan-y;cursor:grab;user-select:none;-webkit-tap-highlight-color:transparent;order:1;width:100%;max-width:100%;flex:0 0 100%!important}.isharestuff-live-ticker .ticker-lead-group{order:2;width:100%;justify-content:space-between;margin-right:0!important}.ticker-track{display:flex;align-items:center;white-space:nowrap;will-change:transform;transform:translate3d(0,0,0);--ticker-speed:1;animation-name:isharestuffTicker;animation-timing-function:linear;animation-iteration-count:infinite;animation-duration:calc(26s / var(--ticker-speed, 1))}.ticker-link{max-width:min(78vw,340px);font-size:.82rem;display:inline-block;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;vertical-align:baseline;transition:color .2s;color:var(--color-text-heading,#f8fafc)!important}.isharestuff-live-ticker .ticker-ctrl-btn{min-width:44px;height:44px;font-size:.78rem;-webkit-tap-highlight-color:transparent}.ticker-controls-bar{gap:.4rem}.ticker-counter{font-family:var(--bs-font-monospace, ui-monospace, monospace);font-size:.72rem;line-height:1;color:var(--color-text-secondary,#94a3b8);min-width:3.4em;text-align:center;user-select:none;white-space:nowrap;margin-left:auto}.ticker-item{font-size:.82rem}.ticker-item .ticker-date{font-size:.72rem;vertical-align:baseline}.ticker-text-group{display:inline-flex;align-items:baseline}.ticker-badge-live-btn{border:0;cursor:pointer;text-decoration:none!important}.ticker-badge{font-size:.78rem!important;min-height:44px!important;min-width:44px!important;padding:6px 12px!important;display:inline-flex!important;align-items:center!important;justify-content:center!important}@media (min-width:992px){.navbar-expand-lg{flex-wrap:nowrap;justify-content:flex-start}.navbar-expand-lg .navbar-toggler{display:none}}@media (prefers-reduced-motion:reduce){@layer overrides{#news-popup,#news-toast-banner,.animate-pulse,.live-pulse-dot,.live-pulsing-dot,.news-item-card{animation:none;transition:none}}.ticker-track{animation:none!important}.ticker-content{cursor:default}}@media (min-width:768px){.isharestuff-live-ticker{flex-wrap:nowrap;row-gap:0;backdrop-filter:blur(12px);padding:.5rem!important;margin-bottom:1rem!important}.isharestuff-live-ticker .ticker-content{order:0;width:auto;max-width:none;flex:1 1 auto!important}.isharestuff-live-ticker .ticker-lead-group{order:0;width:auto;justify-content:flex-start;margin-right:1rem!important}.ticker-controls-bar{gap:.3rem}.isharestuff-live-ticker .ticker-ctrl-btn{min-width:30px;height:auto;font-size:inherit}.ticker-counter{font-size:.66rem;margin-left:0}.ticker-track{animation-duration:calc(40s / var(--ticker-speed, 1))}.ticker-link{max-width:340px;font-size:.85rem}.ticker-item{font-size:.85rem}.ticker-badge{font-size:inherit!important;min-height:0!important;min-width:0!important;padding:.5rem 1rem!important}}@media (max-width:359.98px){.ticker-counter{display:none}.ticker-controls-bar{gap:.3rem}.ticker-badge{padding:6px 9px!important}} 🔒 Critical Collabora Online Flaw Lets Attackers Execute Commands on Nextcloud Servers | Sicherheitslücken (CVE) – TSECURITY.DE
EILMELDUNGEN LIVE
IT Security VideoEröffnungsveranstaltung (vcfb26)(17.10.2026 um 00:00 Uhr)
•
IT Security VideoMechanische Simulation der Zuse Z1 (vcfb26)(17.10.2026 um 00:00 Uhr)
•
IT Security Video"Stoppt den Kalippo-Fresser" oder: Wer definiert den Computerspiele-Kanon? (vcfb26)(17.10.2026 um 00:00 Uhr)
•
IT Security VideoOpen Source: From Its Beginnings to Today – An Incredible Success Story (vcfb26)(17.10.2026 um 00:00 Uhr)
•
IT Security VideoDie Konfigurierbare Datenstation Robotron K8915 (vcfb26)(17.10.2026 um 00:00 Uhr)
•
IT Security Video"KI" - warum sie nicht die Menschheit auslöscht und worüber wir stattdessen reden sollten (jh26congress)(18.10.2026 um 00:00 Uhr)
•
IT Security VideoPolitik debuggen: Vom Report zur NGO (jh26congress)(18.10.2026 um 00:00 Uhr)
•
IT Security VideoSound und Grafik auf Altair und IMSAI (vcfb26)(18.10.2026 um 00:00 Uhr)
•
IT Security VideoInside the HVSC: Wie Community-Software die Erforschung des größten C64-Musikarchivs ermöglicht (vcfb26)(18.10.2026 um 00:00 Uhr)
•
Malware / Trojaner / VirenGhostBat Android Malware: 60 Banken- und UPI-Apps in Indien im Visier(18.10.2026 um 14:05 Uhr)
•
IT Security VideoEröffnungsveranstaltung (vcfb26)(17.10.2026 um 00:00 Uhr)
•
IT Security VideoMechanische Simulation der Zuse Z1 (vcfb26)(17.10.2026 um 00:00 Uhr)
•
IT Security Video"Stoppt den Kalippo-Fresser" oder: Wer definiert den Computerspiele-Kanon? (vcfb26)(17.10.2026 um 00:00 Uhr)
•
IT Security VideoOpen Source: From Its Beginnings to Today – An Incredible Success Story (vcfb26)(17.10.2026 um 00:00 Uhr)
•
IT Security VideoDie Konfigurierbare Datenstation Robotron K8915 (vcfb26)(17.10.2026 um 00:00 Uhr)
•
IT Security Video"KI" - warum sie nicht die Menschheit auslöscht und worüber wir stattdessen reden sollten (jh26congress)(18.10.2026 um 00:00 Uhr)
•
IT Security VideoPolitik debuggen: Vom Report zur NGO (jh26congress)(18.10.2026 um 00:00 Uhr)
•
IT Security VideoSound und Grafik auf Altair und IMSAI (vcfb26)(18.10.2026 um 00:00 Uhr)
•
IT Security VideoInside the HVSC: Wie Community-Software die Erforschung des größten C64-Musikarchivs ermöglicht (vcfb26)(18.10.2026 um 00:00 Uhr)
•
Malware / Trojaner / VirenGhostBat Android Malware: 60 Banken- und UPI-Apps in Indien im Visier(18.10.2026 um 14:05 Uhr)
•
Intelligence View
⚡ tsecurity.de Intelligence

Critical Collabora Online Flaw Lets Attackers Execute Commands on Nextcloud Servers

A critical unauthenticated OS command injection flaw in Collabora Online’s built-in CODE Server app for Nextcloud lets remote attackers run commands as the web …

Sicherheitslücken (CVE) GBHackers Security | #1 Globally Trusted Cyber Security News Platform 1 Min. Lesezeit TA0001 · T1190 Cloud & IT-Enterprise
Beitrag
0
Seite
0
↗ Quelle (GBHackers Security | #1 Globally Trusted Cyber Security News Platform)
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!

A critical unauthenticated OS command injection flaw in Collabora Online’s built-in CODE Server app for Nextcloud lets remote attackers run commands as the web server user. The advisory rates it 9.2 on CVSS v4. Collabora Online vulnerability According to the security advisory published by Collabora Online on GitHub, the vulnerability is tracked as... Weiterlesen: Critical Collabora Online Flaw Lets Attackers Execute Commands on Nex…

🔍 CTI & Forensik

Cyber Threat Intelligence & Forensik

ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
1 belegte Technik
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes
OpenVAS (GVM)ModSecurityNuclei
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
3 Knoten · 2 Relationen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
No reader ratings yet
Was this page helpful?
0
Jetzt Bewertung abgeben
🟢 Niedrig (1-3.9) 🟡 Mittel (4.0-6.9) 🔴 Hoch (7.0-8.9) Kritisch (9.0-10.0)
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken

Related story clusters & sources (vector AI)

7 sources
CVE-2026-68097 | Linux Kernel up to 7.2-rc4 ksmbd set_ntacl_dacl buffer overflow (Nessus ID 366919)
6 more sources
VulDB Updates2 hours agoCVE-2026-68161 | Linux Kernel up to 7.2-rc4 SCTP sctp_ctrlsock_exit denial of service (Nessus ID 366919) VulDB Updates2 hours agoCVE-2026-74565 | Linux Kernel up to 6.12.102/6.18.43/7.1.7/7.2-rc5 nf_tables nft_obj_destroy/nft_rcv_nl_event/nft_obj_lookup use after free (EUVD-2026-59630 / Nessus ID 366919) VulDB Updates4 hours agoCVE-2023-52629 | Linux Kernel up to 2.6.20/6.5.3 push-switch flush_work use after free (610dbd8ac271/246f80a0b17f / Nessus ID 366919) VulDB Updates4 hours agoCVE-2023-53231 | Linux Kernel up to 6.4.6 kernel/locking/mutex.c blk_mq_flush_plug_list stack-based overflow (Nessus ID 366919 / WID-SEC-2025-2053) VulDB Updates4 hours agoCVE-2023-53538 | Linux Kernel up to 6.4.3 btrfs push_node_left null pointer dereference (EUVD-2023-60070 / Nessus ID 366919) VulDB Updates4 hours agoCVE-2023-54233 | Linux Kernel up to 6.2.10 ASoC sof_ipc4_route_setup null pointer dereference (Nessus ID 366919 / WID-SEC-2025-2941)

Mehr aus dieser Kategorie

CVE-2022-46834 | SICK RFU65x up to 2.20 SSH Interface risky encryption (EUVD-2022-49616)
18.10.2026
CVE-2022-46886 | ServiceNow Response List Update redirect (KB1219857 / EUVD-2022-49666)
18.10.2026
CVE-2022-46835 | SailPoint IdentityIQ JavaServer Faces path traversal (EUVD-2022-49617)
18.10.2026
CVE-2022-46888 | NexusPHP up to 1.7.32 Query Parameter cross site scripting (EUVD-2022-49668)
18.10.2026
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
Pull to refresh
TTS Reader • tsecurity.de Voice
Nächster Beitrag