CISA lists exploited Collabora Online flaw CVE-2026-110447
Unauthenticated attackers can run OS commands as the web server user when the built-in CODE server is stopped; fix is 26.4.303.
5
Stories per day · 30 days
2 stories, newest first · one card per story
Stories tagged #collabora-online
CISA lists exploited Collabora Online command injection in KEV
CVE-2026-110447 in Collabora Online's built-in CODE Server is actively exploited; FCEB agencies must prioritize fixes.