Don't forget that #Nextcloud runs on PHP so for those of you who tend to set it and forget it, keep an eye out for those PHP patches tomorrow.

Am nächsten #DiDay in #oldenburg geht es um das Thema #nextcloud.

Kommt vorbei, um euch von Big Tech zu befreien.

Am 1.11.26 ab 18 Uhr im Mainframe, nahe dem Bahnhof.

Alt...

Flyer für DiDay Oldenburg

Interesting, there seems to be developing new #keepass compatible version for password management in #nextcloud, Highly welcomed,

https://github.com/StudioCuda/KeePassNC

If anyone is at the @Nextcloud Enterprise Day in Copenhagen today, come say hi! 👋

#nextcloud #nextcloudconf2026 #opensource #openproject #conference

Alt...

A big banner saying Nextcloud Enterprise Day Copenhagen 2026

Alt...

A selfie with my badge

Man kann mit KI schon geile Sachen machen. Seit heute morgen steht in meinem Keller ein kleiner Rechner. 100€ refurbed. Darauf ein #Linux, #Obsidian und #Nextcloud-Sync. Sowie eine kleine Applikation, die die Texte in beiden Systemen per #ollama und #embeddinggemma in #Vektoren übersetzt. Per #LongPolling horcht eine kleine Applikation auf einen Nextcloud #Talk Chat, und beantwortet Fragen. Für letzteres ist dann doch noch ein billiges externes #LLM über #Mammouth eingebunden.

Alt...

Ein Screenshot von Nextcloud Talk. Michael Giesler fragt: "@Obsidian, wie heißt mein Homeserver?" Obsidian antwortet: "Dein Homeserver ist im Netzwerk als "kellerrechner" bekannt. Quelle: Ressourcen/Homeserver.md"

y'know what would be a marriage made in heaven? Or close to it?

#Nextcloud on #OpenBSD.

With #EuroOffice, #ZFS, #NextcloudTalk, #encryption, #federation, #2FA, and the kitchen sink of options in Nextcloud's apps and services… #FLOSS platforms developed in the #EU and #Canada and the rest of the world.

Fully able to displace US-based #BigTech / #BusinessBigTech straight out of the box, and running on pipes direct to #Europe with #Norway's help, and to #Asia w/ #CPTPP.

This could be good.

@womp #Seafile has never been a replacement for #Nextcloud. Seafile can replace the file sync. But there are many other features in Nextcloud, that Seafile was never intended to replace.
Using Owncloud/Nextcloud for more than a decade, initially on a Raspberry Pi. No problems like that you are talking about.

Musik in Nextcloud organisieren

Musik in Nextcloud organisieren ist manchmal eine Herausforderung. Aber es gibt Mittel und Wege das zu organisieren.

#Nextcloud #Musik_Streamer #Ampache #subsonic #Linux

https://gnulinux.ch/musik-in-nextcloud-organisieren

today is a joyous day, for I have yeeted #nextcloud into the virtual trash where it belongs. never again will it bog down my #homelab server or my client machines with its amateur-hour user interfaces and intern-grade PHP infinite loop code triggering all my cpu and thermal alarms at random hours.

for anyone wondering I finally replaced the file sharing with #seafile and it is better in every way

CVE-2026-110447: Critical Nextcloud Collabora CODE Server vulnerability

A command injection flaw in Nextcloud’s built-in `richdocumentscode` app can allow unauthenticated OS command execution when the embedded CODE server is not running.

The concerning part: public reports describe successful exploitation, PHP web shell deployment, and attempts to locate password databases and cryptocurrency wallet files.

Patch: `richdocumentscode` 26.4.303 or later. Disabling the app alone is not sufficient.

Technical analysis, detection commands, and remediation:
https://thecybersecguru.com/exploits/nextcloud-cve-2026-110447-collabora-rce/

#CyberSecurity #Nextcloud

🚨 Rapid Response | Collabora Online Built-in CODE Server OS Command Injection (CVE-2026-110447) (CVSS 9.2) is a critical OS command injection vulnerability affecting the Collabora Online Built-in CODE Server app for Nextcloud. Exploitation in the wild has been reported, allowing unauthenticated attackers to execute operating system commands.
Censys currently detects 19,454 Internet-exposed hosts and 103,350 web properties with the app installed. These figures represent detected installations, not confirmed vulnerable instances.

Organizations should upgrade to version 26.4.303 or later, or remove the app. Disabling it is not sufficient.

Full Censys ARC advisory, including affected versions, exploitation indicators, and remediation guidance: https://censys.com/advisory/cve-2026-110447/

#CensysARC #Cybersecurity #VulnerabilityManagement #Nextcloud #InfoSec

Alt...

Censys world map highlighting countries by host count from Censys. Notable figures include Germany with 6,965 hosts, France with 1,819, the United States with 1,607, and Russia with 1,382. A list on the side outlines the total hosts for other countries.

🤖 CVE-2026-110447: OS command injection in the Collabora Online "Built-in CODE Server" app (richdocumentscode) for Nextcloud. Exploited since mid-September to plant PHP webshells and hunt password stores and crypto wallets. Fix: update to 26.4.303+; disabling the app is not enough.
🔗 https://www.bleepingcomputer.com/news/security/hackers-exploit-collabora-rce-flaw-to-backdoor-nextcloud-servers/
#CVE #Nextcloud #Exploit #CyberSec

🤖 CVE-2026-110447: critical command execution flaw in Collabora Online's built-in CODE Server app (richdocumentscode) for Nextcloud. Actively exploited to backdoor servers. Patch the app, audit for webshells.
🔗 https://www.bleepingcomputer.com/news/security/hackers-exploit-collaborarceflawtobackdoornextcloudservers/
#CVE #CyberSec #Nextcloud

So, sieht so aus, als würde ich das NextCloud-Problem nicht ohne Unterstützung vom Hoster beheben können. Nach dem Vesuch, erst mal NextCloud upzudaten versteift sich das Ding auf "Internal Server Error" und nicht mal das Zurückspielen des Backups hilft hier weiter. WTF!?

#NextCloud

Kann es wirklich sein, dass #ionos #nextcloud #ManagedService ihren Kunden überhaupt keinen Weg zu einem full #backup anbietet?

Support heute: Kein Export, kein Systemzugriff, nicht mal gegen Geld als Service.

Nada, nothing, nichts?

Ich bin platt .. und freue mich über jeden Tipp.

@kallekn @iode

Yes it is. I used a throwaway account to activate it. Now I only have a self-hosted #NextCloud account, connected via the #Davx5 app.

Attackers are actively exploiting CVE-2026-110447 (CVSS 9.2), a critical Nextcloud Collabora Online RCE flaw in richdocumentscode, to deploy PHP webshells.

#CVE2026110447 #Nextcloud #CollaboraOnline #RCE #Webshell #Cybersecurity #InfoSec #354

https://securityonline.info/nextcloud-collabora-online-cve-2026-110447-exploited/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-110447 (CRITICAL, CVSS 9.2) allows RCE via OS command injection in Collabora Online Built-in CODE Server <26.4.303 (richdocumentscode, Nextcloud). Exploited in the wild since Sept 2026. Patch required. https://radar.offseq.com/threat/cve-2026-110447-cwe-78-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-f68ba52513af6028 #OffSeq #Infosec #Nextcloud #CVE2026110447

Alt...

Critical threat: CVE-2026-110447: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Comma