Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers

T1Covered by 1 source · first reported by BleepingComputer at 15 Oct, 20:25 UTC

Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - Built-in CODE Server app (richdocumentscode) for Nextcloud. [...]

security

Sources

• T1Hackers exploit Collabora RCE flaw to backdoor Nextcloud serversBleepingComputer15 Oct, 20:25

Vulnerabilities

• CVE-2026-110447