Cyber Attacks
Update Nextcloud Collabora App to Stop Remote Code Execution
Attackers used a flaw in the built-in CODE server to install web shells. A patch is available, but disabling the app does not stop the risk.
CVE-2026-110447
Everything Patch Review has reported about CVE-2026-110447: 2 stories, newest first. Part of our Cyber Attacks coverage.
Vulnerabilities
Urgent: Upgrade Collabora Online to 26.4.303 to Patch Actively Exploited Command Injection
Attackers are exploiting a critical command injection flaw in Collabora Online’s built-in CODE Server. Users must upgrade to version 26.4.303 or later immediately.