The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a significant vulnerability in ownCloud, tracked as CVE-2023-49105, to its Known Exploited Vulnerabilities (KEV) catalog. With a critical CVSS score of 9.8, this flaw has been reportedly exploited by a Chinese-speaking threat actor to gain unauthorized access to sensitive nuclear records from a research institution in the Philippines. This incident underscores the urgent need for organizations using ownCloud to patch this vulnerability to safeguard their data against potential breaches.
For businesses, especially those in sensitive sectors like nuclear research or other critical infrastructure, this incident highlights the importance of maintaining robust cybersecurity practices, including regular software updates and vulnerability management. The exploitation of such a critical flaw not only jeopardizes sensitive information but also poses a broader threat to national security and public safety. This situation serves as a stark reminder of the continual evolution of cyber threats and the necessity for organizations to adopt proactive measures in their cybersecurity frameworks to mitigate risks associated with vulnerabilities in widely used software systems.
---
*Originally reported by [The Hacker News](https://thehackernews.com/2026/08/snowflake-github-actions-flaw-lets.html)*