Vulnérabilité

CVE-2026-110447 activement exploitée : Collabora Online – Built-in CODE Server OS Command Injection

CISA KEV · 23 octobre 2026 à 20 h 00 · Gravité critique

Collabora Collabora Online – Built-in CODE Server when used within the NextCloud platform contains an OS command injection vulnerability that allows for remote code execution when the CODE server isn't running.