CVE-2017-9286: Opensuse Leap

High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days.

The packaging of NextCloud in openSUSE used /srv/www/htdocs in an unsafe manner, which could have allowed scripts running as wwwrun user to escalate privileges to root during nextcloud package upgrade.

Affected products

• Opensuse Leap: version 42.3 only

Published 2018-03-01. Last modified 2026-06-17.