Actively exploited command injection vulnerability in Collabora Online – Built-in CODE Server (CVE-2026-110447)
Collabora Collabora Online – Built-in CODE Server when used within the NextCloud platform contains an OS command injection vulnerability that allows for remote code execution when the CODE server isn’t running.
