Collabora CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL Collabora CVE published 2026-10-14

CVE-2026-110447

CVE-2026-110447 is a critical OS command injection vulnerability in Collabora Online Built-in CODE Server before version 26.4.303. The vulnerability is exploited in the wild and allows remote code execution when the CODE server isn't running. This issue only affects deployments with CODE Server, not standalone Collabora Online servers. Affected product deployments should be identified, and owners assigned [truncated]