https://cybercrime.club/tags/web-shell/Infrastructure security news for people who build infrastructure.Hugo -- gohugo.ioen-usSun, 18 Oct 2026 23:03:14 -0400https://cybercrime.club/posts/nextcloud-code-server-cve-2026-110447-collabora-command-injection-webshell/Sun, 18 Oct 2026 23:03:14 -0400https://cybercrime.club/posts/nextcloud-code-server-cve-2026-110447-collabora-command-injection-webshell/A critical OS command injection in the Collabora-based built-in CODE server app for Nextcloud (richdocumentscode) has been exploited in the wild since about September 10; the CVE was published October 14, over a month after the patch.vulnerabilities