ownCloud

Mentions · 7d0
Mentions · 30d0
All mentions6
First seenAug 27, 2026
Last mentionedSep 8, 2026

Timeline

6 articles · newest first

VU#943094: ONLYOFFICE ownCloud integration plugin contains a Server-Side Request Forgery (SSRF) vulnerability

ONLYOFFICE's ownCloud integration plugin 9.12 has an SSRF flaw (CVE-2026-84282) letting authenticated admins probe internal networks; no patch exists yet.

CERT/CC Vulnerability NotesSep 8, 14:23 UTC · Sep 8, 2026VulnerabilityCVE-2026-842822 · 2 reads

Old, Unpatched Flaws Give Attackers Access to Philippines Nuclear Agency

Threat actors exploited old unpatched ownCloud vulnerabilities to breach the Philippines nuclear agency, stealing reactor databases, personnel records, and credentials.

Dark ReadingSep 2, 01:00 UTC · Sep 2, 2026Data breachExploited1

Philippine Nuclear and Naval Targets Hit by Suspected Chinese Operator

Suspected Chinese-speaking operator breached Philippine nuclear research and naval supplier systems via ownCloud CVE-2023-49103 and WordPress CVE-2024-28000.

Security AffairsAug 29, 09:16 UTC · Aug 29, 2026Threat actorExploitedCVE-2024-280002 · 1 read

ownCloud Flaw Exploited to Steal Nuclear Records From Philippine Research Body

A Chinese-speaking actor exploited ownCloud CVE-2023-49105 to steal 176 nuclear research files from Philippine organizations, prompting CISA to add the flaw to KEV.

The Hacker NewsAug 28, 15:56 UTC · Aug 28, 2026Exploit / PoCExploitedCVE-2023-49105 CVE-2024-28000 CVE-2026-53362+14 · 2 reads

U.S. CISA adds ownCloud, Linux Kernel, and JFrog Artifactory flaws to its Known Exploited Vulnerabilities catalog

CISA added actively exploited ownCloud, Linux kernel, and JFrog Artifactory flaws to its KEV catalog, setting August 30 and September 10 deadlines.

Security AffairsAug 28, 13:56 UTC · Aug 28, 2026Exploit / PoCExploitedCVE-2023-49105 CVE-2026-53362 CVE-2026-663844 · 2 reads

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA added three actively exploited vulnerabilities to its KEV catalog: CVE-2023-49105 (ownCloud), CVE-2026-53362 (Linux kernel), and CVE-2026-66384 (JFrog Artifactory).

CISA AdvisoriesAug 27, 12:00 UTC · Aug 27, 2026Exploit / PoCExploitedCVE-2023-49105 CVE-2026-53362 CVE-2026-663842 · 1 read

Related CVEs

by mentions

CVE-2023-4910543%9.8
Improper Authentication in ownCloud Server Allows Unauthenticated File Access
published Nov 21, 2023ownCloud Server (owncloud/core)KEV
CVE-2026-53362<1%7.8
Out-of-Bounds Write in Linux Kernel IPv6 Stack via UDPv6 MSG_SPLICE_PAGES
published Jul 4, 2026Linux kernelKEV
CVE-2026-66384<1%5.3
Authenticated Path Traversal Write in JFrog Artifactory Exploited in the Wild
published Aug 12, 2026JFrog ArtifactoryKEV
CVE-2024-2800068%9.8
Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache.This issue affects LiteSpeed Cache
published Aug 21, 2024litespeedtech litespeed cache
CVE-2026-84282<1%6.5
SSRF in ONLYOFFICE ownCloud Integration plugin 9.12
published Sep 8, 2026ONLYOFFICE ownCloud Integration plugin

Appears with

ownCloudproduct · 4
CISAorganization · 3
JFrog Artifactoryproduct · 2
Linux Kernelproduct · 2
Philippine nuclear research bodyvictim · 2
JFrogvendor · 2
LiteSpeed Cacheproduct · 2
Hunt.ioorganization · 2
ZKTecovendor · 2
LiteSpeedvendor · 2
ZKTeco BioTimeproduct · 2
OpenAIorganization · 2
ONLYOFFICEvendor · 1
Philippines Nuclear Agencyvictim · 1
ONLYOFFICE ownCloud integration pluginproduct · 1
Slivermalware · 1

Entities are extracted by the model from each article. First seen Aug 27, 2026, last mentioned Sep 8, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.