Topic

Cve 2026 110447

Coverage tagged cve 2026 110447.

Articles: 1
Desk: 1

Data graphic: Cover for the Nextcloud Collabora backdoor story, with a giant 9.2 CVSS v4.0 score for an unauthenticated command injection, a CISA KEV CVE-2026-110447 stamp, and three facts: fixed in 26.4.303, KEV due 26 Oct, first logged attack 10 Sep.

criticalExploits Cve 2026 110447

Nextcloud's Built-in Collabora Server Is Being Used to Plant Webshells, and Disabling the App Does Not Fix It

Attackers have used a proxy.php command injection in Nextcloud's built-in Collabora CODE server to plant webshells since 10 Sep. Patch to 26.4.303, then hunt.

Oct 24 · 5 min