Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers
Teaser from the source
Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - Built-in CODE Server app (richdocumentscode) for Nextcloud. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerLinked advisories
- CVE-2026-110447Collabora Collabora Online – Built-in CODE Server — Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
- CVE-2026-110447Collabora Online Built-in CODE Server vor 26.
- CVE-2026-110447Collabora Online Built-in CODE Server (NextCloud): Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Benutzerrechten
Affected vendors and products
More on Collabora
Other advisories
- MediumCVE-2026-66912Synacor Zimbra Collaboration: Cross-Site-Scripting (XSS)
- MediumCVE-2026-66912Synacor Zimbra Collaboration: Cross-Site-Scripting (XSS)
- MediumCVE-2026-66911Synacor Zimbra Collaboration: Cross-Site-Scripting (XSS)
- MediumCVE-2026-66911Synacor Zimbra Collaboration: Cross-Site-Scripting (XSS)
- MediumCVE-2026-50057Synacor Zimbra Collaboration Suite: Mehrere Schwachstellen
- HighCVE-2026-93640Zimbra Collaboration Suite: fehlerhafte Berechtigungen für kritische Ressource
- HighCVE-2026-93639Zimbra Collaboration Suite: fehlende Autorisierung
- MediumCVE-2026-93638Zimbra Collaboration Suite: Cross-Site-Scripting (XSS)
Other news entries
- Cisco Unified Communications Products Security Hardening Release: October 2026NewsCisco PSIRT
- Synacor Zimbra Collaboration Suite: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloudNewsThe Hacker News
- Cisco Produkte (Emergency Responder, Prime Collaboration, Unified Communications Manager und Unity Connection): Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Close Identity Gaps in Software Development Before Unleashing AINewsDark Reading
- Collabora Online Built-in CODE Server (NextCloud): Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit BenutzerrechtenVulnerabilityBSI CERT-Bund
- Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE AppNewsThe Hacker News
- Alleged KillSec Ransomware Mastermind a 16-Year-OldNewsDark Reading
ID