Curated Cyber Threat Intelligence
Threat Feed
Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.
scheduleUpdated 2026-10-28 · 04:17 UTC
articleTotal: 1890 reports
Filtered Reports
3 / 3 results
criticalbug_reportVulnerabilitybug_reportVulnerability
Critical RCE in Nextcloud Collabora app actively exploited for backdoors
Collabora Online - Built-in CODE Server app (richdocumentscode) for Nextcloud. Specific vulnerable versions not disclosed in provided data.
CVE-2026-11044715 Oct · 18:25 UTC
criticalbug_reportVulnerabilitybug_reportVulnerability
Nextcloud Collabora CODE app RCE exploited in wild since September 10
Collabora Online - Built-in CODE Server (richdocumentscode) versions before 26.4.303, used with Nextcloud. Standalone Collabora Online servers not affected. Nextcloud instances using only richdocuments app (external Collabora server) not affected.
Nextcloud14 Oct · 15:38 UTC
highbug_reportVulnerabilitybug_reportVulnerability
FFmpeg 'PixelSmash' flaw enables RCE on Jellyfin, DoS on multiple apps
FFmpeg (version details not specified). Downstream impact: Jellyfin (remote code execution), Kodi, Emby, Nextcloud, PhotoPrism, OBS Studio (denial-of-service). Affects media processing and streaming applications using vulnerable FFmpeg libraries.
FFmpeg22 Jun · 19:05 UTC