Nextcloud: Collabora's built-in CODE server is being exploited. Check it today
If you run Nextcloud with the built-in Collabora server, stop and check this today. CVE-2026-110447 is an OS command injection in the app Collabora Online - Built-in CODE Server (richdocumentscode). It needs no login and no user interaction, it is rated CVSS 4.0: 9.2, and attackers have been using it since September. CISA added it to its list of known exploited vulnerabilities on 23 October, with a deadline of 26 October for US federal agencies. Affected: the app richdocumentscode in every versi
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.