2026 buyer’s guide ranks 12 secure file-sharing platforms
The guide scores Microsoft, Egnyte, Box, Nextcloud, Kiteworks and others on governance, encryption and deployment, not on a new incident.
18
Product
Nextcloud
- Mentions · 7d1
- Mentions · 30d8
- All mentions9
- First seenSep 16, 2026
- Last mentioned6d ago
Timeline
9 articles · newest firstCISA adds exploited Collabora Online and VeloCloud flaws to KEV
FCEB agencies must patch command injection in Collabora CODE Server and SQL injection in on-prem VeloCloud Orchestrator by October 26.
84
Caddy pattern exposes only Immich and Nextcloud share links
The public site returns 404 unless the app itself confirms the share key; everything else stays on the VPN.
26
Searchlight releases php2shell-scanner for two PHP RCE bugs
The open-source scanner forces a PHP out-of-memory condition instead of trusting version banners.
62
Hackers Exploit Critical Collabora Online Flaw to Backdoor Nextcloud Servers
Attackers are exploiting CVE-2026-110447 in Nextcloud's Collabora CODE app to plant web shells.
78
Critical Collabora Online Flaw Lets Attackers Execute Commands on Nextcloud Servers
Unauthenticated command injection CVE-2026-110447 in Nextcloud's built-in Collabora CODE Server can run commands as the web user.
66
Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers
Attackers are exploiting CVE-2026-110447 in Nextcloud's built-in Collabora app to plant webshells and hunt credentials.
78
Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App
Attackers exploited CVE-2026-110447 in Nextcloud's optional Collabora CODE app to plant web shells.
76
DeepSeek v4.1 Flash Is Now Our Best Hacking Model
DeepSeek V4.1 Flash achieves 11/11 code executions on Enclave's AI hacking benchmark for $4.65 across Grafana, Jenkins, and Nextcloud targets.
60
Related CVEs
by mentions- CVE-2026-11044773%9.2Unauthenticated OS command injection in Nextcloud CODE Server
- CVE-2025-662081%7.2Collabora Online - Built-in CODE Server (richdocumentscode) provides a built-in server with all of the document editing features of Collabora Online
- CVE-2026-1146251%9.4SQL injection in Arista VeloCloud Orchestrator grants superuser
- CVE-2026-109619100%9.2Use-after-free RCE in PHP via stale request globals
- CVE-2026-109618100%9.2OOM longjmp memory flaw enabling RCE in PHP
Appears with
- Nextcloudvendor · 5
- Collaboravendor · 5
- richdocumentscodeproduct · 4
- Collabora Onlineproduct · 4
- Nextcloudorganization · 2
- Collaboraorganization · 2
- Boxvendor · 1
- VeloCloud Orchestratorproduct · 1
- CISAorganization · 1
- Egnytevendor · 1
- Aristavendor · 1
- Collabora Online - Built-in CODE Serverproduct · 1
- Kiteworksvendor · 1
- Enclave AIorganization · 1
- PHPvendor · 1
- Second Securityorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.