CVE-2025-53827 CRITICAL

CVE-2025-53827: ownCloud Core: Updater has an exposed dangerous method or function

Vendor Owncloud

Product ownCloud Core

Weakness CWE-749

Published July 6, 2026

Last update July 7, 2026

View on NVD All CVEs

CVSS base score

9.1/10

Attack vector Network

Attack complexity Low

Privileges required High

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

ownCloud Core is the server-side component of the file storage, synchronization, and sharing application ownCloud Classic. In versions prior to 10.15.3, the Updater on ownCloud 10 before 10.15.3 has an exposed dangerous method or function. Attackers with administrative privileges may leverage functionality to execute arbitrary code. This issue has been fixed in version 10.15.3.

Key dates

02Disclosure timeline

July 6, 2026 CVE published

July 7, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-53827 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/749.html AskarLabs — CWE-749 write-up Exposed Dangerous Method or Function

Related vulnerabilities

CVE-2025-53827: ownCloud Core: Updater has an exposed dangerous method or function

01Description

02Disclosure timeline

03References

04Related CVE