Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App
https://thehackernews.com/2026/10/hackers-backdoor-nextcloud-servers.html

🚨 EUVD-2026-101610 📊 8.2/10 🏢 InvoiceShelf 📝 InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to versio... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101610 #cybersecurity #infosec #cve #euvd
🚨 EUVD-2026-101621 📊 6.5/10 🏢 LabRedesCefetRJ 📝 WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the pre-installation web/instalador/instalador.php endpoint is reachable bef... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101621 #cybersecurity #infosec #cve #euvd
🚨 EUVD-2026-101622 📊 8.8/10 🏢 LabRedesCefetRJ 📝 WeGIA is a web manager for charitable institutions. Prior to 3.8.6, an authenticated user with access to the Material & Patrimônio module can su... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101622 #cybersecurity #infosec #cve #euvd
🚨 EUVD-2026-101623 📊 6.9/10 🏢 cemtan 📝 A security vulnerability has been detected in cemtan sar2html 4.0.0. This affects the function deleteHost/deleteRange/deleteAll of the file sar2html.py. ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101623 #cybersecurity #infosec #cve #euvd
🚨 EUVD-2026-101624 📊 8.1/10 🏢 LabRedesCefetRJ 📝 WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the auto-prepended web/html/seguranca/sessionStart.php reflects an attacker-... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101624 #cybersecurity #infosec #cve #euvd
🚨 EUVD-2026-101618 📊 6.0/10 🏢 Amazon 📝 A remote user who can read encrypted objects in the S3 bucket can force a padding downgrade by altering the padding scheme recorded in an object's metada... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101618 #cybersecurity #infosec #cve #euvd
🚨 EUVD-2026-101625 📊 9.8/10 🏢 LabRedesCefetRJ 📝 WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/socio/sistema/cadastro_cobrancas_geracao.php en... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101625 #cybersecurity #infosec #cve #euvd
🚨 EUVD-2023-12519 📊 5.3/10 🏢 OpenSSL 📝 Applications that use a non-default option when verifying certificates may be vulnerable to an attack from a malicious CA to circumvent certain checks. I... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-12519 #cybersecurity #infosec #cve #euvd
🚨 EUVD-2026-101131 📊 6.9/10 🏢 freeswitch 📝 Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msg_multipart_parse() that allows unauthenticated remote attackers to c... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101131 #cybersecurity #infosec #cve #euvd
🚨 EUVD-2026-101626 📊 4.8/10 🏢 error311 📝 FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.15.0, FileRise public shared-folder ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101626 #cybersecurity #infosec #cve #euvd
🚨 EUVD-2026-101420 📊 9.8/10 🏢 Cisco 📝 A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write ar... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101420 #cybersecurity #infosec #cve #euvd
🚨 EUVD-2026-101495 📊 8.6/10 🏢 Palo Alto Networks 📝 A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attac... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101495 #cybersecurity #infosec #cve #euvd
🚨 EUVD-2026-101627 📊 6.6/10 🏢 Palo Alto Networks 📝 Denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a den... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101627 #cybersecurity #infosec #cve #euvd
🚨 EUVD-2026-101628 📊 8.2/10 🏢 OpenAEV-Platform 📝 OpenAEV is an open source platform allowing organizations to plan, schedule and conduct cyber adversary simulation campaign and tests. Prior to... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101628 #cybersecurity #infosec #cve #euvd
Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App
https://thehackernews.com/2026/10/hackers-backdoor-nextcloud-servers.html
🚨 EUVD-2026-101629 📊 n/a 🏢 SonicWall 📝 An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings, potentially allo... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101629 #cybersecurity #infosec #cve #euvd
🚨 EUVD-2023-12520 📊 5.3/10 🏢 OpenSSL 📝 The function X509_VERIFY_PARAM_add0_policy() is documented to implicitly enable the certificate policy check when doing certificate verification. However ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-12520 #cybersecurity #infosec #cve #euvd
🚨 EUVD-2026-101630 📊 n/a 🏢 SonicWall 📝 Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the S... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101630 #cybersecurity #infosec #cve #euvd
🚨 EUVD-2026-101631 📊 6.1/10 🏢 Palo Alto Networks 📝 A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101631 #cybersecurity #infosec #cve #euvd
🚨 EUVD-2026-73080 📊 7.5/10 🏢 Microsoft 📝 Microsoft.OpenApi.YamlReader vulnerable to denial of service via YAML alias expansion 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-73080 #cybersecurity #infosec #cve #euvd