Hackers are exploiting a critical flaw in the Collabora Online Built-in CODE Server app for Nextcloud, with users reporting web shells on compromised servers. Tracked as CVE-2026-110447, the vulnerability allows remote attackers to run operating system commands without logging in. It affects the richdocumentscode app before version 26.4.303 and carries a CVSS v4 score of 9.2. The GitHub Advisory Database entry states that attackers exploited the flaw during September and October 2026. An October 3 warning on the Nextcloud community forum reported that users had found web shells on their servers. These malicious scripts can let attackers run commands and maintain access after the initial break-in. Available reports do not identify...
Read the full article at the source.
Comments (0)
No comments yet. Be the first to comment!