CVE-2025-53827

ownCloud Core is the server-side component of the file storage, synchronization, and sharing application ownCloud Classic. In versions prior to 10.15.3, the Updater on ownCloud 10 before 10.15.3 has an exposed dangerous method or function. Attackers with administrative privileges may leverage functionality to execute arbitrary code. This issue has been fixed in version 10.15.3.

• CWE-749

• https://github.com/owncloud/security-advisories/security/advisories/GHSA-hvcx-ph66-mmvw

Published

Jul 6, 2026

Last Modified

Jul 8, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-53821WeGIA is an open source web manager with a focus on the Port…6.1
• CVE-2025-53822WeGIA is an open source web manager with a focus on the Port…6.1
• CVE-2025-53823WeGIA is an open source web manager with a focus on the Port…8.8
• CVE-2025-53824WeGIA is an open source web manager with a focus on the Port…5.4
• CVE-2025-53825Dokploy is a free, self-hostable Platform as a Service (PaaS…9.8
• CVE-2025-53826File Browser provides a file managing interface within a spe…9.8
• CVE-2025-53828SharePoint for ownCloud is an application for using SharePoi…8.5
• CVE-2025-53829ownCloud is a file storage, synchronization, and sharing app…8
• CVE-2025-5383A vulnerability was found in Yifang CMS up to 2.0.2 and clas…4.8
• CVE-2025-53830Anti-Virus for ownCloud is an anti-virus application for fil…9.1
• CVE-2025-53831DrawIO for ownCloud is an application for using DrawIO with …8.2
• CVE-2025-53832Lara Translate MCP Server is a Model Context Protocol (MCP) …7.5