Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - Built-in CODE Server app (richdocumentscode) for Nextcloud. [...]
Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers
Summary + source link. No paywalls, no tracking.