Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

3 matching records, 1 with confirmed exploitation.

1. 77
   KEV NVD 18d ago

   Collabora Online – Built-in CODE Server OS Command Injection Vulnerability

   Collabora Collabora Online – Built-in CODE Server when used within the NextCloud platform contains an OS command injection vulnerability that allows for remote code execution when the CODE server isn't running.

   KEV · due 26 Oct 2026 (overdue) EPSS 0.73 Fix available CVE-2026-110447 Collabora Collaboration
2. 19
   CVE NVD 41h ago

   Collabora Online is a collaborative online office suite based on LibreOffice technology.

   Collabora Online is a collaborative online office suite based on LibreOffice technology. Prior to 24.04.18 and 25.04.11, the `host_session_id` query/form parameter is substituted into the `cool.html` editor page without HTML…

   CVSS 4.7 Fix available CVE-2026-48164 CollaboraOnline Collaboration
3. 19
   CVE NVD 41h ago

   Collabora Online is a collaborative online office suite based on LibreOffice technology.

   Collabora Online is a collaborative online office suite based on LibreOffice technology. Prior to 24.04.18 and 25.04.11, several document operations delegated to `LibreOfficeKit` in the per-document kit process fail to enforce a…

   CVSS 4.3 Fix available CVE-2026-46499 CollaboraOnline Collaboration

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Collabora&limit=100. RSS for this section: feed.xml.