CISA lists exploited Collabora Online flaw CVE-2026-110447
Unauthenticated attackers can run OS commands as the web server user when the built-in CODE server is stopped; fix is 26.4.303.
Unauthenticated attackers can run OS commands as the web server user when the built-in CODE server is stopped; fix is 26.4.303.
Attackers are exploiting CVE-2026-110447 in Nextcloud's Collabora CODE app to plant web shells.
Unauthenticated command injection CVE-2026-110447 in Nextcloud's built-in Collabora CODE Server can run commands as the web user.
Attackers are exploiting CVE-2026-110447 in Nextcloud's built-in Collabora app to plant webshells and hunt credentials.
Attackers exploited CVE-2026-110447 in Nextcloud's optional Collabora CODE app to plant web shells.
DeepSeek V4.1 Flash achieves 11/11 code executions on Enclave's AI hacking benchmark for $4.65 across Grafana, Jenkins, and Nextcloud targets.
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.
Today 1.5K readers · 2.2K views · 881 reads · all time 169K views