Critical 9.2
CVE-2026-110447
Active Exploitation of Remote Command Execution Flaw CVE-2026-110447 in Nextcloud Collabora CODE Server App
Vendor / product: Nextcloud Collabora Online CODE Server
Event date: 2026-09-10
Public PoC: Yes
First tracked by RiskWire: 2026-10-16
Sources & citations (19)
- When the Security Fix Arrives Before the Warning expertinthecloud.co.za · 2026-10-16
- Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers bleepingcomputer.com · 2026-10-15
- Aviso distingue duas CVEs e relata exploração do CODE integrado ao Nextcloud neoteo.com · 2026-10-15
- Critical Nextcloud Collabora Vulnerability Exploited Since September: Attackers Deploy Webshells to Steal Sensitive Data undercodenews.com · 2026-10-15
- Hackers Exploit Critical Nextcloud Collabora Flaw to Execute Remote Commands cyberpress.org · 2026-10-16
- GitHub meldt exploitatie van Nextclouds ingebouwde CODE-app neoteo.com · 2026-10-15
- Falha crítica no Collabora para Nextcloud está a ser ativamente explorada tugatech.com.pt · 2026-10-15
- GitHub meldet Ausnutzung von Nextclouds integrierter CODE-App neoteo.com · 2026-10-15
- GitHub distingue due CVE e segnala attacchi alla CODE integrata in Nextcloud neoteo.com · 2026-10-15
- Vulnerability in Nextcloud app allowed attackers to plant web shells scworld.com · 2026-10-15
- GitHub distingue dos CVE de Nextcloud y sitúa la explotación de Collabora CODE en septiembre y octubre neoteo.com · 2026-10-15
- GitHub distingue CVE-2026-110447 de CVE-2025-66208 et signale son exploitation neoteo.com · 2026-10-15
- GitHub says CVE-2026-110447 differs from CVE-2025-66208 neoteo.com · 2026-10-15
- С 10 сентября хакеры ищут пароли и криптокошельки на Nextcloud itzine.ru · 2026-10-15
- Nextcloud sotto attacco: falla Collabora CODE installa web shell senza login matricedigitale.it · 2026-10-15
- Nextcloud : des serveurs piratés via une faille critique de l'application Collabora it-connect.fr · 2026-10-15
- Злоумышленники внедрили веб-шеллы на серверы Nextcloud через приложение Collabora cisoclub.ru · 2026-10-15
- GitHub Advisory Database odróżnia CVE-2026-110447 od CVE-2025-66208 neoteo.com · 2026-10-15
- Collabora RCE used to backdoor Nextcloud servers news-pravda.com · 2026-10-16
References
See CVE-2026-110447 in context
RiskWire tracks every exploited CVE this week, cross-referenced against CISA KEV with federal remediation deadlines. Filtered to your vendor stack.
Book a 20-min demo →