VULNERABILITY INTELLIGENCE

CVE-2017-9286

CVSS score9 HIGH

EPSS probability1.18%

CISA KEVNot currently listed

Published2018-03-01

Last modified2026-06-17

Description

The packaging of NextCloud in openSUSE used /srv/www/htdocs in an unsafe manner, which could have allowed scripts running as wwwrun user to escalate privileges to root during nextcloud package upgrade.