Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers

CVE v události 1

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE.

Jak se o tom psalo 3

1. 16. 10. 2026 15:37 · CSIRT Itálie (ACN) IT

   Nextcloud: rilevato sfruttamento di una vulnerabilità nel componente Collabora Online Built-in CODE Server

   Questo CSIRT ha rilevato, nel contesto nazionale, una compromissione di un server Nextcloud attraverso lo sfruttamento della vulnerabilità identificata tramite la CVE-2026-110447, con gravità “critica”, nel componente Collabora Online - Built-in CODE Server (richdocumentscode), impiegato per la modifica collaborativa di documenti.

2. 16. 10. 2026 · zachyceno 06:00 · NCSC-FI FI

   Nextcloud Unauthenticated OS command injection in the richdocumentscode proxy

   Classification: Critical, Solution: Official Fix, Exploit Maturity: Functional, CVSSv3.1: None, CVEs: CVE-2026-110447, Summary: Users of Nextcloud with Collabora Online - Built-in CODE Server app can be vulnerable through proxy.php. A request can cause an operating system command to run as the web server user. The attack only works while the built-in CODE server is not running. So on a container restart, an upgrade, or after a crash. It is not sufficient to disable the app to avoid the problem,…

3. 15. 10. 2026 22:25 · BleepingComputer US nadpis události

   Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers

   Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - Built-in CODE Server app (richdocumentscode) for Nextcloud. [...]