CVE-2026-110447 — Vulnerability intelligence

Collabora — Collabora Online – Built-in CODE Server

Published: 2026-10-14T02:27:42.315Z

CVSS

9.2

CISA KEV

Known exploitation

Original source text (not a translation)

Collabora Collabora Online – Built-in CODE Server when used within the NextCloud platform contains an OS command injection vulnerability that allows for remote code execution when the CODE server isn't running.

Sources

• Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• CVE-2026-110447