Threat actors are actively exploiting a critical remote code execution vulnerability in the built-in Collabora Online CODE server application for Nextcloud, tracked as CVE-2026-110447. The flaw allows attackers to plant backdoors on vulnerable Nextcloud instances. Administrators managing these collaborative environments must immediately apply available patches to prevent full system compromise.
READ THE ORIGINAL ARTICLE AT BLEEPINGCOMPUTER.COM →