Index

Search

Search the public record. Drafts and scheduled notes are not included.

threats

Nextcloud richdocumentscode proxy RCE is CVE-2026-110447

MITRE’s CVE-2026-110447 covers OS command injection in Nextcloud’s Collabora Online Built-in CODE Server app before 26.4.303. The CVE states exploitation in the wild in September and October 2026 with PHP webshells reported by operators. Fixed in 26.4.303. CVSS 4.0 9.2. Not in CISA KEV.

Published 5h ago

CriticalActive Exploitation

CVE-2026-110447

Nextcloud richdocumentscode proxy.php OS command injection

RCE

Published 6h ago