ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More · 3h Silent Lynx Exploitat WinRAR Vitium ad Instruendum Reverse Shell in Attacis Regni CIS · 6h NGINX Corrigit 5 Vitia, Inclusa Possibili RCE et Bug TLS Qui Potest Saltare Client-Cert Checks · 9h Next.js Emittit Emendationem Extra Ordinem pro Duobus Criticis RCE Defectibus in Caching et SVG Processu · 9h Drupal Patches Criticum Core RCE Vitium Sine Login Via Contributis Modulis · 10h Vulnerabilitas in software Sparx Systems Enterprise Architect · 10h Curl verhelpt 'high' RCE-kwetsbaarheid gevonden door Anthropic · 10h Vulnerabilitates in Slican telephonis · 11h Palo Alto Networks monet ad abusum vulnerabilitatis in ignibus securitatis · 14h Cisco nuntiat activum abusus criticae vulnerabilitatis in Secure Email Gateway · 15h ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More · 3h Silent Lynx Exploitat WinRAR Vitium ad Instruendum Reverse Shell in Attacis Regni CIS · 6h NGINX Corrigit 5 Vitia, Inclusa Possibili RCE et Bug TLS Qui Potest Saltare Client-Cert Checks · 9h Next.js Emittit Emendationem Extra Ordinem pro Duobus Criticis RCE Defectibus in Caching et SVG Processu · 9h Drupal Patches Criticum Core RCE Vitium Sine Login Via Contributis Modulis · 10h Vulnerabilitas in software Sparx Systems Enterprise Architect · 10h Curl verhelpt 'high' RCE-kwetsbaarheid gevonden door Anthropic · 10h Vulnerabilitates in Slican telephonis · 11h Palo Alto Networks monet ad abusum vulnerabilitatis in ignibus securitatis · 14h Cisco nuntiat activum abusus criticae vulnerabilitatis in Secure Email Gateway · 15h

ACyber Sentinel Turma Aestimationis Securitatis

← Redire

⚠️ Renuntiatio Vulnerabilitatis

CVE-2025-66208

CRITICAL CVSS 9.8 CVSS 3.1 📌 Analyzed

CVE-2025-66208 - Configuration-Dependent RCE (OS Command Injection) in richdocumentscode proxy

Collabora Online - Built-in CODE Server (richdocumentscode) provides a built-in server with all of the document editing features of Collabora Online. In versions prior to 25.04.702, Collabora Online has a Configuration-Dependent RCE (OS Command Injection) in richdocumentscode proxy. Users of Nextcloud with Collabora Online - Built-in CODE Server app can be vulnerable to attack via proxy.php and an intermediate reverse proxy. This vulnerability is fixed in 25.04.702.

Publicatum: Dec 03, 2025 19:15

Ultima Mutatio: Jun 17, 2026 09:56