{"revision":"60cd3436cd6a4a618a477f41ba0a4605","evidence":{"cve":"CVE-2026-110447","kev":{"cve":"CVE-2026-110447","product":"Collabora Online – Built-in CODE Server","name":"Collabora Online – Built-in CODE Server OS Command Injection Vulnerability","dateAdded":"2026-10-23","dueDate":"2026-10-26","knownRansomwareUse":false,"shortDescription":"Collabora Collabora Online – Built-in CODE Server when used within the NextCloud platform contains an OS command injection vulnerability that allows for remote code execution when the CODE server isn't running.","vendor":"Collabora","isMicrosoft":false,"products":[],"advisoryUrl":"https://help.nextcloud.com/t/to-collabora-built-in-user-update-asap/250516","msrcUrl":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-110447","cisaUrl":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-110447"},"epss":null,"observedAt":"2026-10-23T19:48:26.2781449+00:00","kevRetained":false,"reviewIdentity":"683d8e26c65f337a93a4f929"}}