CRITICALCVSS v4 9.2Actively exploited · CISA KEV since 2026-10-23Vulnerability
CVE-2026-110447
Collabora Collabora Online – Built-in CODE Server when used within the NextCloud platform contains an OS command injection vulnerability that allows for remote code execution when the CODE server isn't running.
Properties
- Vulnerability name
- Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
- Epss score
- 0.01225
- Last seen
- 2026-10-23T20:09:43+00:00
- Due date
- 2026-10-26
- Exploited euvd since
- 2026-10-23T00:00:00+00:00
- Source url
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100780
- Date added
- 2026-10-23
- Euvd base score version
- 4.0
- Score
- 9.2
- Euvd vendor
- Collabora
- First seen by Signal
- 2026-10-18T13:39:00+00:00
- Euvd base score
- 9.2
- Vendor project
- Collabora
- Content hash
- 21b9f18320a4a67034d0b4f449d10b5470b7b77b0bbc3cbb202f7028f9483338
- Published at
- 2026-10-14T03:17:20.683
- Euvd updated
- 2026-10-23T20:09:43+00:00
- Last modified
- 2026-10-16T19:56:15.773
- Euvd epss pct
- 1.23
- Epss percentile
- 0.68615
- Licence
- ENISA legal notice 1.2: reproduction authorised provided the source is acknowledged
Related Entities (3)
DESCRIBES (1)
HAS_WEAKNESS (1)
INVOLVES (1)
Explore deeper with Ninja Signal's threat intelligence graph