CVE-2025-53829

High

Description

ownCloud is a file storage, synchronization, and sharing application. In ownCloud 10 prior to version 10.15.3, an attacker with administrative privileges can exploit a path traversal vulnerability in the system to execute arbitrary code. Upgrade ownCloud 10 to version 10.15.3 or later to receive a patch.

SeverityHigh
CVSS8.0
Exploit probability—
ProductownCloud 10
PublishedJul 6, 2026
First seenJul 6, 2026
Weakness typeCWE-23CWE-23

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
owncloud ownCloud 10< 10.15.3—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.