Silent Lynx Exploitat WinRAR Vitium ad Instruendum Reverse Shell in Attacis Regni CIS · 3h NGINX Corrigit 5 Vitia, Inclusa Possibili RCE et Bug TLS Qui Potest Saltare Client-Cert Checks · 6h Next.js Emittit Emendationem Extra Ordinem pro Duobus Criticis RCE Defectibus in Caching et SVG Processu · 6h Drupal Patches Criticum Core RCE Vitium Sine Login Via Contributis Modulis · 7h Vulnerabilitas in software Sparx Systems Enterprise Architect · 7h Curl verhelpt 'high' RCE-kwetsbaarheid gevonden door Anthropic · 7h Vulnerabilitates in Slican telephonis · 8h Palo Alto Networks monet ad abusum vulnerabilitatis in ignibus securitatis · 11h Cisco nuntiat activum abusus criticae vulnerabilitatis in Secure Email Gateway · 11h Langflow's Critica Authenticated RCE Vulnerabilitas Targetata in 1,423 Honeypot Exploit Conatibus · 12h Silent Lynx Exploitat WinRAR Vitium ad Instruendum Reverse Shell in Attacis Regni CIS · 3h NGINX Corrigit 5 Vitia, Inclusa Possibili RCE et Bug TLS Qui Potest Saltare Client-Cert Checks · 6h Next.js Emittit Emendationem Extra Ordinem pro Duobus Criticis RCE Defectibus in Caching et SVG Processu · 6h Drupal Patches Criticum Core RCE Vitium Sine Login Via Contributis Modulis · 7h Vulnerabilitas in software Sparx Systems Enterprise Architect · 7h Curl verhelpt 'high' RCE-kwetsbaarheid gevonden door Anthropic · 7h Vulnerabilitates in Slican telephonis · 8h Palo Alto Networks monet ad abusum vulnerabilitatis in ignibus securitatis · 11h Cisco nuntiat activum abusus criticae vulnerabilitatis in Secure Email Gateway · 11h Langflow's Critica Authenticated RCE Vulnerabilitas Targetata in 1,423 Honeypot Exploit Conatibus · 12h

ACyber Sentinel Turma Aestimationis Securitatis

← Redire

⚠️ Renuntiatio Vulnerabilitatis

CVE-2026-110447

CRITICAL CVSS 9.2 CVSS 4.0 📌 Received

CVE-2026-110447 - Collabora Online CODE Server OS Command Injection Vulnerability

Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS command injection in proxy.php when the CODE server isn't running (e.g., the product was recently restarted). The vulnerability is not present in standalone Collabora Online servers; only this deployment with CODE Server is affected.

Publicatum: Oct 14, 2026 03:17

Ultima Mutatio: Oct 14, 2026 19:17