271 matches found
EUVD-2026-100780
Collabora Online Built-in CODE Server before 26.4.303 richdocumentscode, a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS command injection in proxy.php when the CODE server isn't...
CVE-2026-110447
The Collabora Online Built-in CODE Server (Nextcloud app richdocumentscode ) is vulnerable to remote code execution (RCE) via an OS command injection in the proxy.php script. The flaw occurs specifically when the CODE server is not running, such as immediately after a restart, crash, or upgrade. ...
CVE-2026-110447
Collabora Online Built-in CODE Server before 26.4.303 richdocumentscode, a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS command injection in proxy.php when the CODE server isn't...
PT-2026-113607
Name of the Vulnerable Software and Affected Versions Collabora Online Built-in CODE Server richdocumentscode versions prior to 26.4.303 Description An OS command injection exists in the proxy.php file of the Collabora Online Built-in CODE Server for Nextcloud. This issue allows unauthenticated...
VulnCheck KEV: CVE-2026-110447
Collabora Collabora Online – Built-in CODE Server when used within the NextCloud platform contains an OS command injection vulnerability that allows for remote code execution when the CODE server isn't running...
CVE-2026-110447: Improper Neutralization of Special Elements used in an OS Command
Collabora Online Built-in CODE Server before 26.4.303 richdocumentscode, a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS command injection in proxy.php when the CODE server isn't...
CVE-2026-102422 vulnerabilities
Vulnerabilities for packages: code-server, renovate...
GHSA-PQG4-J6R4-53MV vulnerabilities
Vulnerabilities for packages: code-server, renovate...
CVE-2026-87776 vulnerabilities
Vulnerabilities for packages: thingsboard, jupyter-base-notebook, serve, vitess, code-server...
GHSA-VC2V-76PW-4V95 vulnerabilities
Vulnerabilities for packages: thingsboard, jupyter-base-notebook, serve, vitess, code-server...
GHSA-C475-QRG2-PJ4R vulnerabilities
Vulnerabilities for packages: wazuh-dashboard, kibana, wazuh-dashboard-fips, opensearch-dashboards, code-server, opensearch-dashboards-fips, gemini-cli...
CVE-2026-102990 vulnerabilities
Vulnerabilities for packages: wazuh-dashboard, kibana, wazuh-dashboard-fips, opensearch-dashboards, code-server, opensearch-dashboards-fips, gemini-cli...
GHSA-C475-QRG2-PJ4R vulnerabilities
Vulnerabilities for packages: code-server, opensearch-dashboards...
CVE-2026-102990 vulnerabilities
Vulnerabilities for packages: code-server, opensearch-dashboards...
GHSA-RFGV-XXQX-MFG5 vulnerabilities
Vulnerabilities for packages: code-server, lerna, prism, renovate...
CVE-2026-18149 vulnerabilities
Vulnerabilities for packages: code-server, lerna, prism...
GHSA-PMJH-FQ2X-6V4X vulnerabilities
Vulnerabilities for packages: code-server, lerna, prism...
CVE-2026-18540 vulnerabilities
Vulnerabilities for packages: code-server, lerna, prism, renovate...