CVE-2026-110447

Reported Context (2)

Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - Built-in CODE Server app (richdocumentscode) for Nextcloud. Attackers Exploit Collabora Code-Execution Flaw in Nextcloud’s Built-In Server App
Collabora fixed it in version 26.4.303 on September 11 and on October 14 published an advisory with the identifier CVE-2026-110447, warning that turning off the app does not help: it must be updated or removed. Flaw in Nextcloud’s Built-in Collabora CODE App Exploited to Plant Web Shells

CVE (1)

People (3)

MITRE ATT&CK (6)

Vendors (2)

Products (4)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.