Collabora Online Built-in CODE Server

Search everything

Mentions · 7d0
Mentions · 30d1
All mentions1
First seenOct 23, 2026
Last mentioned10d ago

Timeline

1 articles · newest first

CISA lists exploited Collabora CODE Server command injection

Versions before 26.4.303 allow remote code execution when the built-in CODE server is not running.

CISA Known Exploited VulnerabilitiesOct 23, 00:00 UTC · 10d agoExploit / PoCExploitedCVE-2026-1104471

Related CVEs

by mentions

CVE-2026-11044773%9.2
Unauthenticated OS command injection in Nextcloud CODE Server
published 19d agoCollabora Online Built-in CODE Server (richdocumentscode Nextcloud app)KEVPoC ×3

Appears with

richdocumentscodeproduct · 1
CISAorganization · 1
Collaboravendor · 1
Nextcloudorganization · 1

Entities are extracted by the model from each article. First seen Oct 23, 2026, last mentioned 10d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.