Advisory catalogCVE-2026-110447
CVE-2026-110447Published
Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS c…
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-110447 · Microsoft / collected KEV context
cve-program · CVE-2026-110447
Related operational evidence
Explicit CVE identifiers- Collabora Online – Built-in CODE Server OS Command Injection Vulnerability · New CISA KEV listing observed · 23 Oct 2026