{"id":"CVE-2026-110447","url":"https://compromised.live/t/CVE-2026-110447","kind":"exploited_vuln","tier":1,"severity":"high","title":"Collabora Collabora Online – Built-in CODE Server: Collabora Online – Built-in CODE Server OS Command Injection Vulnerability","summary":"Attackers can run their own commands on the server remotely, because a flaw lets crafted input be passed to the operating system, and this is being actively exploited. Collabora Online built-in CODE Server, when used within the NextCloud platform. Apply the vendor's update now and check for signs of compromise.","summary_source":"ai","affected":[],"epss":null,"kev":{"date_added":"2026-10-23","due_date":"2026-10-26","ransomware":false},"first_seen":"2026-11-03T21:55:44.095Z","updated_at":"2026-11-03T21:55:44.095Z","status":"active","details":"Collabora Collabora Online – Built-in CODE Server when used within the NextCloud platform contains an OS command injection vulnerability that allows for remote code execution when the CODE server isn't running.","aliases":["CVE-2026-110447"],"sources":[{"name":"kev","id":"CVE-2026-110447","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110447"}]}