Nextcloud Collabora Vulnerability Exploited

By Editorial Team | October 21, 2026
Nextcloud Collabora Built-in CODE Server vulnerability CVE-2026-110447 exploited to plant web shells, October 2026

A Nextcloud Collabora vulnerability in the optional Built-in CODE Server app has let attackers plant web shells on Nextcloud servers since September 10. Collabora fixed it on September 11 without a security notice, and the CVE (CVE-2026-110447) followed only on October 14. Disabling the app does not close the hole: update it or remove it.…

Read More

AhsayCBS Backup Server Vulnerability Exploited

By Editorial Team | October 15, 2026
AhsayCBS backup server vulnerability under attack: Huntress says version 10.3.4 is affected too. Restrict the console and hunt for web shells now.

An AhsayCBS backup server vulnerability is being exploited, and the version everyone was told to install did not fix it. Huntress saw attackers chain two flaws from October 7 to run code as SYSTEM on exposed Ahsay Cloud Backup Servers. On October 8 it found that 10.3.4, the release the public CVE entries call fixed,…

Read More

PTC Windchill RCE CVE-2026-12569: Web Shells Actively Deployed

By Editorial Team | June 30, 2026

The PTC Windchill RCE CVE-2026-12569 (CVSS 9.3) is actively exploited — and this is the second attack wave targeting the same product in three months. Attackers are deploying persistent JSP web shells inside Windchill PDMLink and FlexPLM installations right now. CISA added the flaw to its Known Exploited Vulnerabilities catalog on June 25, 2026; the…

Read More