🚨 ACTIVE EXPLOITATION
- Attackers Plant Web Shells on Nextcloud Servers via Flaw in Collabora's Built-in CODE App
Attackers exploited a command-injection flaw in Collabora's Built-in CODE Server app to plant web shells on Nextcloud servers.- Affects Nextcloud servers running the optional 'Collabora Online - Built-in CODE Server' app (richdocumentscode); all versions before 26.4.303 are vulnerable; standalone Collabora Online servers are not affected.
- The proxy.php script embeds request-path text into a double-quoted bash command, letting unauthenticated requests run commands as the web server user — but only while the local CODE server is down (restart, upgrade, or crash).
- Attackers decoded a one-line PHP web shell (shx**.php / shrf4645.php files) into the app's folder and searched for credential stores and crypto wallets (**.kdbx, wallet.dat, keystore.json, bitwarden, 1password, .bitcoin, .electrum, .monero, .ethereum).
- First logged attack September 10, 2026 from IP 139.28[.]18[.]122 via /apps/richdocumentscode/proxy.php?status with %2e%2e, $( and ${IFS} markers; a September 14 attempt came from 89.38[.]98[.]50; shell SHA-256: 4b9fbd0663fbfd6028fc216ed18e0d6ef3ae498a7fdc97083e4b0ce3cec40562.
- Fixed in 26.4.303 (CVE-2026-110447); disabling the app does not close the flaw — it must be updated or removed; the fix requires Nextcloud 30+, and the earlier CVE-2025-66208 fix does not prevent this flaw.
🕵️ RESEARCH & DEEP DIVES
- Booz Allen: AI Agents Navigate Unfamiliar OT Systems and Move Equipment in Minutes
Booz Allen testing shows autonomous AI agents can compromise and manipulate industrial OT systems within minutes without prior knowledge.- Applies to OT/ICS environments in industrial and critical infrastructure sectors relying on 'security through obscurity'.
- In Booz Allen's isolated OT lab, frontier AI models met every test objective across eight scenarios with no prior knowledge of the systems.
- Models moved from a perimeter compromise to actions inside an industrial control network in just over 16 minutes.
- One model found a robotic arm, mapped its protection zones and motion limits, and moved it within minutes.
- Existing defenses slowed some actions, but no single safeguard consistently stopped the autonomous models; findings were presented at SecurityWeek's ICS Cybersecurity Conference in Nashville.
📋 ADVISORIES
curl 8.23.0 patches 24 vulnerabilities including High-severity HTTP/2 use-after-free
The curl project released curl 8.23.0 fixing 24 security vulnerabilities, including a High-severity HTTP/2 upload use-after-free.- Affects curl and libcurl 8.12.0 through 8.22.0, used across an estimated 30 billion installations.
- The High-severity flaw CVE-2026-92392 is an HTTP/2 upload use-after-free that a malicious server can trigger during a ~135KB upload, with demonstrated client-side code execution under strict conditions.
- Other fixes include credential leaks (CVE-2026-86414 proxy credential leak, CVE-2026-94266 .netrc password exposure via CURLINFO_EFFECTIVE_URL), IMAP command injection (CVE-2026-87864), and authentication, cookie, HSTS, and crash bugs.
- 18 of the 24 CVEs came from a dedicated audit by security firm AISLE; the HTTP/2 flaw was reported by Luna Tong of Anthropic via its OSS Scanner.
- The release also removes SMB and SMBS protocol support; the fix for the use-after-free is a six-line reorder in lib/multi.c by Stefan Eissing.
Sources 📄 Source: daniel.haxx.se · 📎 Coverage: thehackernews.com · 👁 via Cyber Security News, cryptika.com (discovered)F5 discloses three NGINX Plus and Open Source flaws allowing worker crashes and potential code execution
F5 has disclosed three high-severity NGINX vulnerabilities that let remote unauthenticated attackers crash worker processes via crafted HTTP requests.- Affects NGINX Plus 37.0.0–37.0.4 (all three bugs) and NGINX Open Source 1.31.0–1.31.6 / 1.0.0–1.30.5, plus NGINX Instance Manager, F5 WAF for NGINX, NGINX Gateway Fabric, and some Ingress Controller releases.
- CVE-2026-97205 (use-after-free in ngx_http_core_module) triggers when AIO is enabled and an SSI page uses include virtual; CVE-2026-93479 is a heap buffer overflow tied to the map directive and regex captures; CVE-2026-15176 is a heap buffer overflow involving alias with rewrite and $request_filename.
- All three affect the NGINX data plane handling user traffic; F5 rated each High 8.1 (CVSS v3.1) and Critical 9.2 (CVSS v4.0), and exploitation requires specific version and configuration combinations.
- Crafted HTTP requests can crash or restart workers; code execution is possible only if ASLR is disabled or bypassed; no active exploitation has been reported.
- Fixes: NGINX Open Source 1.31.7 or 1.30.6, NGINX Plus 37.0.5.1 or 37.1.0.1, NGINX Instance Manager 2.24.0, F5 WAF for NGINX 5.16.0/5.14.2, NGINX Gateway Fabric 2.8.0, Ingress Controller 5.7.0.
Sources 📄 Source: my.f5.com · 📎 Coverage: cybersecuritynews.com · 👁 via Cyber Security News, cryptika.com (discovered)
🔓 CVEs & KEV
CVE-2026-55572 — e107inc e107 — CVSS 10.0 — e107: SQL injection in alt_auth plugin (otherdb / e107db backends) via login ...
CVE-2026-55573 — e107inc e107 — CVSS 9.8 — e107: Unsafe deserialization in install.php allows unauthenticated RCE via PO...
CVE-2026-105445 — Docker Hub — CVSS 9.4 — Docker Hub flaw let attackers impersonate users, tamper with images
📋 ADVISORIES
📄 Source for Cisco patches actively exploited Secure Email Gateway zero-day CVE-2026-76519 — sec.cloudapps.cisco.com
📄 Source for WordPress Skydropx plugin <= 2.1.4 broken access control flaw tracked as CVE-2026-108480 — patchstack.com