ownCloud

Mentions · 7d0
Mentions · 30d0
All mentions4
First seenAug 27, 2026
Last mentionedSep 8, 2026

Timeline

4 articles · newest first

VU#943094: ONLYOFFICE ownCloud integration plugin contains a Server-Side Request Forgery (SSRF) vulnerability

ONLYOFFICE's ownCloud integration plugin 9.12 has an SSRF flaw (CVE-2026-84282) letting authenticated admins probe internal networks; no patch exists yet.

CERT/CC Vulnerability NotesSep 8, 14:23 UTC · Sep 8, 2026VulnerabilityCVE-2026-842822 · 2 reads

Old, Unpatched Flaws Give Attackers Access to Philippines Nuclear Agency

Threat actors exploited old unpatched ownCloud vulnerabilities to breach the Philippines nuclear agency, stealing reactor databases, personnel records, and credentials.

Dark ReadingSep 2, 01:00 UTC · Sep 2, 2026Data breachExploited1

Philippine Nuclear and Naval Targets Hit by Suspected Chinese Operator

Suspected Chinese-speaking operator breached Philippine nuclear research and naval supplier systems via ownCloud CVE-2023-49103 and WordPress CVE-2024-28000.

Security AffairsAug 29, 09:16 UTC · Aug 29, 2026Threat actorExploitedCVE-2024-280002 · 1 read

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA added three actively exploited vulnerabilities to its KEV catalog: CVE-2023-49105 (ownCloud), CVE-2026-53362 (Linux kernel), and CVE-2026-66384 (JFrog Artifactory).

CISA AdvisoriesAug 27, 12:00 UTC · Aug 27, 2026Exploit / PoCExploitedCVE-2023-49105 CVE-2026-53362 CVE-2026-663842 · 1 read

Related CVEs

by mentions

CVE-2023-4910543%9.8
Improper Authentication in ownCloud Server Allows Unauthenticated File Access
published Nov 21, 2023ownCloud Server (owncloud/core)KEV
CVE-2026-53362<1%7.8
Out-of-Bounds Write in Linux Kernel IPv6 Stack via UDPv6 MSG_SPLICE_PAGES
published Jul 4, 2026Linux kernelKEV
CVE-2026-66384<1%5.3
Authenticated Path Traversal Write in JFrog Artifactory Exploited in the Wild
published Aug 12, 2026JFrog ArtifactoryKEV
CVE-2024-2800068%9.8
Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache.This issue affects LiteSpeed Cache
published Aug 21, 2024litespeedtech litespeed cache
CVE-2026-84282<1%6.5
SSRF in ONLYOFFICE ownCloud Integration plugin 9.12
published Sep 8, 2026ONLYOFFICE ownCloud Integration plugin

Appears with

ownCloudvendor · 4
ZKTecovendor · 1
CISAorganization · 1
Philippine marine engineering companyvictim · 1
Philippines Nuclear Agencyorganization · 1
Hunt.ioorganization · 1
ETC JSCorganization · 1
ZKTeco BioTimeproduct · 1
LiteSpeedvendor · 1
ONLYOFFICEvendor · 1
Philippines Nuclear Agencyvictim · 1
JFrogvendor · 1
ONLYOFFICE ownCloud integration pluginproduct · 1
Philippine nuclear research bodyvictim · 1
LiteSpeed Cacheproduct · 1
CERT/CCorganization · 1

Entities are extracted by the model from each article. First seen Aug 27, 2026, last mentioned Sep 8, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.