
CISA lists exploited Collabora Online flaw CVE-2026-110447
Unauthenticated attackers can run OS commands as the web server user when the built-in CODE server is stopped; fix is 26.4.303.
5
1 stories, newest first · one card per story

Unauthenticated attackers can run OS commands as the web server user when the built-in CODE server is stopped; fix is 26.4.303.
Today 2.2K readers · 2.7K views · 404 reads · all time 108K views