MSRXVendors / Collabora
Collabora vulnerabilities being exploited
1 Collabora flaw was confirmed exploited in the wild in the past 365 days, across 1 product: Collabora Online – Built-in CODE Server. If you run any of them, patch these first.
| Added | Exploited vulnerability | Fix by |
|---|---|---|
| 2026-10-23 | CVE-2026-110447 Collabora Online – Built-in CODE Server Collabora Online – Built-in CODE Server OS Command Injection Vulnerability Collabora Collabora Online – Built-in CODE Server when used within the NextCloud platform contains an OS command injection vulnerability that allows for remote code execution when the CODE server isn't running. | 2026-10-26 |
Source: CISA Known Exploited Vulnerabilities catalog 2026.10.29 (live). A listing means some versions are affected: check yours in the advisory. Guidance only.