Daily Brief
Daily Brief, October 16, 2026
Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers
Threat actors are exploiting a critical command execution flaw in Collabora Online’s built-in CODE Server app for Nextcloud, tracked as CVE-2026-110447. The issue matters because it can let attackers backdoor Nextcloud servers through an optional component many teams may overlook.
Inventory Nextcloud deployments that include Collabora’s built-in CODE Server, then patch or remove the component and check for web shells or other unexpected files.
Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation
Palo Alto Networks has issued updates for a high-severity PAN-OS remote code execution flaw in the management interface after active exploitation was reported. This is significant because management interfaces are high-value targets and successful abuse can give attackers direct control of firewalls.
Identify PAN-OS devices exposed to the management interface, apply the vendor updates, and review logs for any signs of unauthorised management access.