Actively Exploited Collabora RCE Leaves Nextcloud Servers Backdoored

19 October 2026  |  dark6  |  Vulnerability

Attackers are exploiting CVE-2026-110447, a critical unauthenticated command-injection flaw in the Collabora Online Built-in CODE Server app for Nextcloud. Administrators must upgrade to richdocumentscode 26.4.303 or later and...

>> read more