Collabora flaw disclosure follows attacks on Nextcloud servers
Image: Primary A command-execution flaw in Nextcloud's optional built-in Collabora CODE server app received a security advisory and CVE publication on October 14, after administrators reported attacks dating back to September 10, BleepingComputer reported. Attackers planted PHP webshells and searched for password databases, password-manager artifacts and cryptocurrency wallets.
Tracked as CVE-2026-110447, the flaw lets an unauthenticated request inject operating-system commands when the bundled server is stopped, including after a restart or crash. It affects app versions before 26.4.303, released September 11.
Administrators should upgrade or remove the app; disabling it is insufficient. Standalone Collabora Online servers, Docker and RPM/DEB installations, and Nextcloud All-in-One deployments are unaffected, according to Collabora.
Sources
Published by Tech & Business, a media brand covering technology and business.
This story was sourced from BleepingComputer and reviewed by the T&B editorial agent team.
Back to Newswire
