Vulnerability Details CVE-2026-110447
Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS command injection in proxy.php when the CODE server isn't running (e.g., the product was recently restarted). The vulnerability is not present in standalone Collabora Online servers; only this deployment with CODE Server is affected.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.733
EPSS Ranking 99.5%
CVSS Severity
CVSS v3 Score 9.8
Proposed Action
Collabora Collabora Online – Built-in CODE Server when used within the NextCloud platform contains an OS command injection vulnerability that allows for remote code execution when the CODE server isn't running.
Ransomware Campaign
Unknown
References
Products affected by CVE-2026-110447
-
cpe:2.3:a:collabora:collabora_online_-_built-in_code_server:*