Collabora Online

Hackers Exploit CVE-2026-110447 to Backdoor Nextcloud Servers

CVE-2026-110447 is an actively exploited command-injection flaw affecting the Collabora Online Built-in CODE Server app for Nextcloud. Administrators should upgrade to version 26.4.303 or later and investigate exposed systems for web shells.