CISA has added a critical ownCloud vulnerability, CVE-2023-49105 (CVSS 9.8), to its Known Exploited Vulnerabilities (KEV) catalog. A Chinese-speaking threat actor weaponized this flaw to target a nuclear research body in the Philippines. This highlights the severe impact of exploited vulnerabilities on critical infrastructure and national security.