# Collabora flaw disclosure follows attacks on Nextcloud servers

_Published Thursday, October 15, 2026 at 5:38 PM EDT · Security · Latest · Tier 2 — Notable_

![Collabora flaw disclosure follows attacks on Nextcloud servers — Primary](https://www.bleepstatic.com/content/hl-images/2026/10/15/nextcloud.jpg)

A command-execution flaw in Nextcloud's optional built-in Collabora CODE server app received a security advisory and CVE publication on October 14, after administrators reported attacks dating back to September 10, BleepingComputer reported. Attackers planted PHP webshells and searched for password databases, password-manager artifacts and cryptocurrency wallets.

Tracked as CVE-2026-110447, the flaw lets an unauthenticated request inject operating-system commands when the bundled server is stopped, including after a restart or crash. It affects app versions before 26.4.303, released September 11.

Administrators should upgrade or remove the app; disabling it is insufficient. Standalone Collabora Online servers, Docker and RPM/DEB installations, and Nextcloud All-in-One deployments are unaffected, according to Collabora.

## Sources

- [BleepingComputer](https://www.bleepingcomputer.com/news/security/hackers-exploit-collabora-rce-flaw-to-backdoor-nextcloud-servers/)

---
Canonical: https://techandbusiness.org/newswire/m06xCG0DAoR91c2dFL_kCY
Published: 2026-10-15T21:38:42.337Z
Story chronology: 2026-10-14T00:00:00.000Z
Retrieved: 2026-10-15T23:45:08.656Z
Publisher: Tech & Business (techandbusiness.org)