CVE-2026-110447

Vendor

Collabora

Product

Collabora Online – Built-in CODE Server

EPSS

0.73 (p99)

CISA KEV

added 23 Oct 2026, due 26 Oct 2026 (6d overdue)

Weakness

CWE-78

Exposure class

Collaboration

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 77
   KEV NVD 18d ago

   Collabora Online – Built-in CODE Server OS Command Injection Vulnerability

   Collabora Collabora Online – Built-in CODE Server when used within the NextCloud platform contains an OS command injection vulnerability that allows for remote code execution when the CODE server isn't running.

   KEV · due 26 Oct 2026 (overdue) EPSS 0.73 Fix available CVE-2026-110447 Collabora
2. 67
   CISA alert CISA 8d ago

   CISA Adds One Known Exploited Vulnerability to Catalog

   CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-110447 Collabora Online – Built-in CODE Server OS Command Injection Vulnerability This…

   Exploited EPSS 0.73 CVE-2026-110447 Collabora