Built-in CODE Server

Mentions · 7d0
Mentions · 30d1
All mentions1
First seenOct 24, 2026
Last mentioned9d ago

Timeline

1 articles · newest first

CISA lists exploited Collabora Online flaw CVE-2026-110447

Unauthenticated attackers can run OS commands as the web server user when the built-in CODE server is stopped; fix is 26.4.303.

Security AffairsOct 24, 16:53 UTC · 9d agoExploit / PoCExploitedCVE-2026-1104476 · 5 reads

Related CVEs

by mentions

CVE-2026-11044773%9.2
Unauthenticated OS command injection in Nextcloud CODE Server
published 19d agoCollabora Online Built-in CODE Server (richdocumentscode Nextcloud app)KEVPoC ×3

Appears with

CISAorganization · 1
Collaboravendor · 1
Collabora Onlineproduct · 1
Nextcloudvendor · 1

Entities are extracted by the model from each article. First seen Oct 24, 2026, last mentioned 9d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.