CVE-2025-53827CWE-749

CVE-2025-53827

Critical · published July 6, 2026

CVSS v3.1
9.1
EPSS
1%
Percentile
48.8
In the wild
Unconfirmed
What it is

ownCloud Core is the server-side component of the file storage, synchronization, and sharing application ownCloud Classic. In versions prior to 10.15.3, the Updater on ownCloud 10 before 10.15.3 has an exposed dangerous method or function. Attackers with administrative privileges may leverage functionality to execute arbitrary code. This issue has been fixed in version 10.15.3.

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00615 · 48.8th percentile
Weakness
CWE-749 · Exposed Dangerous Method or Function
Published
2026-07-06T20:16Z
References (1)
EPSS history
Timeline
  • 06 JUL 14:31Z
    ownCloud Core: Updater has an exposed dangerous method or function
    cvelistv5