Attackers exploited a flaw in an optional Nextcloud app, Collabora Online – Built-in CODE Server, to plant web shells on Nextcloud servers. Three administrators reported the issue on GitHub, with the first logged attack on September 10.A web shell is a small file that executes any command an attacker sends via a web request, with the rights of the web server account. The flaw
First seen on thehackernews.com
Jump to article: thehackernews.com/2026/10/hackers-backdoor-nextcloud-servers.html
![]()

