CRITICALVulnerability
Global

Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers

·Source: BleepingComputer

Updated:

Executive Summary

Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - Built-in CODE Server app (richdocumentscode) for Nextcloud. [...]

Analysis

Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - Built-in CODE Server app (richdocumentscode) for Nextcloud. [...]

Indicators of Compromise (1)

CVE (1)
CVE-2026-110447
Source Attribution

Originally published by BleepingComputer on Oct 15, 2026.

Related Threats