sign in--:--:--UTC

CVE-2026-110447

exploited in the wild☆ pin

CVSS

9.2

Reports

3

First seen

Oct 15, 2026

Last seen

Oct 24, 2026

Affected product

Collabora Online - Built-in CODE Server (richdocumentscode) for Nextcloud, versions before 26.4.303

Recent reports

CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud

The Hacker NewsOct 24, 2026 High

CISA Adds Collabora Online OS Command Injection to Known Exploited Vulnerabilities Catalog

CISA AdvisoriesOct 23, 2026 Critical

Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers

Bleeping ComputerOct 15, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans