Hackers exploit Collabora RCE vulnerability to open Nextcloud servers through backdoors

Hackers exploit Collabora RCE vulnerability to open Nextcloud servers through backdoors

Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online – Built-in CODE Server app (richdocumentscode) for Nextcloud. Multiple administrator reports indicate that the attacks began in mid-September, about a month before the official event Security bulletinThe GitHub AdviceAnd CVE publication. CVE-2026-110447 affects Richdocumentscode versions before 26.4.303 and … Read more