Nextcloud Warns of Critical Vulnerability CVE-2026-110447
Nextcloud's document editor plugin has a critical flaw allowing attackers to take full control of servers.
The vulnerability, rated CVSS 9.2, allows attackers to execute commands without authentication during server restarts.
US CISA has added it to its KEV list due to frequent exploitation.
Users must update to version 26.4.303 to mitigate the risk.