GHSA-RXP7-6HXX-X8Q5 vulnerabilities

Vulnerabilities for packages: lerna, node-red, actions-runner, wazuh-dashboard-fips, homepage, prism, code-server, unleash-proxy, unleash, wazuh-dashboard, eco-jess, npm...

GHSA-RXP7-6HXX-X8Q5 vulnerabilities

Vulnerabilities for packages: code-server, lerna, npm, prism...

CVE-2026-111997 vulnerabilities

Vulnerabilities for packages: lerna, node-red, actions-runner, wazuh-dashboard-fips, homepage, prism, code-server, unleash-proxy, unleash, wazuh-dashboard, eco-jess, npm...

GHSA-P3HM-X653-5RC6 vulnerabilities

Vulnerabilities for packages: lerna, node-red, actions-runner, wazuh-dashboard-fips, homepage, prism, code-server, unleash-proxy, unleash, wazuh-dashboard, eco-jess, npm...

GHSA-P3HM-X653-5RC6 vulnerabilities

Vulnerabilities for packages: code-server, lerna, npm, prism...

CVE-2026-111997 vulnerabilities

Vulnerabilities for packages: code-server, lerna, npm, prism...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-110447 Collabora Online – Built-in CODE Server OS Command Injection Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber...

Collabora Online – Built-in CODE Server OS Command Injection Vulnerability

Collabora Collabora Online – Built-in CODE Server when used within the NextCloud platform contains an OS command injection vulnerability that allows for remote code execution when the CODE server isn't running...

CVE-2026-111756 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, wazuh-dashboard-fips, unleash-fips, unleash, langfuse, nemo-skills, wazuh-dashboard, opensearch-dashboards-fips, gitlab-rails-ce-fips, nextcloud-server, lambda-nodejs, configurable-http-proxy, code-server, langfuse-fips, semaphore,...

GHSA-8R9P-F939-6H3C vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, wazuh-dashboard-fips, unleash-fips, unleash, langfuse, nemo-skills, wazuh-dashboard, opensearch-dashboards-fips, gitlab-rails-ce-fips, nextcloud-server, lambda-nodejs, configurable-http-proxy, code-server, langfuse-fips, semaphore,...

CVE-2026-111755 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, wazuh-dashboard-fips, unleash-fips, unleash, langfuse, nemo-skills, wazuh-dashboard, opensearch-dashboards-fips, gitlab-rails-ce-fips, nextcloud-server, lambda-nodejs, configurable-http-proxy, code-server, langfuse-fips, semaphore,...

GHSA-Q3JH-WRC6-JGQ8 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, wazuh-dashboard-fips, unleash-fips, unleash, langfuse, nemo-skills, wazuh-dashboard, opensearch-dashboards-fips, gitlab-rails-ce-fips, nextcloud-server, lambda-nodejs, configurable-http-proxy, code-server, langfuse-fips, semaphore,...

CVE-2026-111756 vulnerabilities

Vulnerabilities for packages: nextcloud-server, code-server, langfuse, prism, configurable-http-proxy, kubeflow-pipelines, lerna, opensearch-dashboards...

GHSA-Q3JH-WRC6-JGQ8 vulnerabilities

Vulnerabilities for packages: nextcloud-server, code-server, langfuse, prism, configurable-http-proxy, kubeflow-pipelines, lerna, opensearch-dashboards...

CVE-2026-111755 vulnerabilities

Vulnerabilities for packages: nextcloud-server, code-server, langfuse, prism, configurable-http-proxy, kubeflow-pipelines, lerna, opensearch-dashboards...

GHSA-8R9P-F939-6H3C vulnerabilities

Vulnerabilities for packages: nextcloud-server, code-server, langfuse, prism, configurable-http-proxy, kubeflow-pipelines, lerna, opensearch-dashboards...

Nextcloud Collabora Online Built-in CODE Server 26.4.302 Command Injection Exposure Checker

The Collabora Online Built-in CODE Server richdocumentscode app for Nextcloud before version 26.4.303 contains an unauthenticated OS command injection vulnerability in proxy.php. This tool passively checks a supplied Nextcloud instance for public exposure indicators...

Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App

Attackers exploited a flaw in an optional Nextcloud app, Collabora Online - Built-in CODE Server, to plant web shells on Nextcloud servers. Three administrators reported the issue on GitHub, with the first logged attack on September 10. A web shell is a small file that executes any command an...

CVE-2026-110447

Collabora Online Built-in CODE Server before 26.4.303 richdocumentscode, a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS command injection in proxy.php when the CODE server isn't...

CVE-2026-110447

Collabora Online Built-in CODE Server before 26.4.303 richdocumentscode, a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS command injection in proxy.php when the CODE server isn't...