NextBox: PHP Exploit - Act Now!

According to the PHP developers, a critical PHP bug is circulating, and it appears to be partially exploited already.

Although we have no evidence that current NextBox/Nextcloud installations are affected, we recommend taking one of the following two measures if your NextBox allows access from the Internet:

•     Turn off the NextBox completely
•     Prevent connections from the Internet: Turn off the reverse proxy or turn off port forwarding

Most likely just until tomorrow; by then, there should be a corresponding update—we’ll post an update here accordingly.

The update will then be automatically rolled out to your NextBoxes as soon as it’s available.

Update: We temporarily disabled the 'Backwards Proxy' feature of Nextbox on our side to limit the impact of this exploit until updates are applied or mitigations are in place.