According to the PHP developers, a critical PHP bug is circulating, and it appears to be partially exploited already.
Although we have no evidence that current NextBox/Nextcloud installations are affected, we recommend taking one of the following two measures if your NextBox allows access from the Internet:
