CVE-2026-110447 Collabora Collabora Online - Built-In CODE…
Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS command injection…
- CVSS
- 9.2 Critical
- EPSS
- 73%
- Percentile
- 100
- Published
- 2026-10-14
- Force
- 10 of 12
- Public PoC
- 4
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
On CISA’s exploited list
Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
- Added
- 2026-10-23
- Federal patch deadline
- 2026-10-26
- Ransomware use
- not known