GHSA-P3HM-X653-5RC6 vulnerabilities

Vulnerabilities for packages: code-server, node-red, actions-runner, unleash-proxy, prism, lerna...

CVE-2026-111997 vulnerabilities

Vulnerabilities for packages: code-server, node-red, actions-runner, unleash-proxy, prism, lerna...

GHSA-P3HM-X653-5RC6 vulnerabilities

Vulnerabilities for packages: lerna, prism, code-server...

CVE-2026-111997 vulnerabilities

Vulnerabilities for packages: lerna, prism, code-server...

CVE-2026-111755 vulnerabilities

Vulnerabilities for packages: code-server, homepage, configurable-http-proxy, azurite, opensearch-dashboards, commercial-gitlab-rails-ee-fips, kubeflow-pipelines, gitlab-rails-ce, lambda-nodejs, unleash-fips, unleash, lerna, langfuse, wazuh-dashboard-fips, nextcloud-server, kibana, prism,...

CVE-2026-111756 vulnerabilities

Vulnerabilities for packages: code-server, homepage, configurable-http-proxy, azurite, opensearch-dashboards, commercial-gitlab-rails-ee-fips, kubeflow-pipelines, gitlab-rails-ce, lambda-nodejs, unleash-fips, unleash, lerna, langfuse, wazuh-dashboard-fips, nextcloud-server, kibana, prism,...

GHSA-Q3JH-WRC6-JGQ8 vulnerabilities

Vulnerabilities for packages: code-server, homepage, configurable-http-proxy, azurite, opensearch-dashboards, commercial-gitlab-rails-ee-fips, kubeflow-pipelines, gitlab-rails-ce, lambda-nodejs, unleash-fips, unleash, lerna, langfuse, wazuh-dashboard-fips, nextcloud-server, kibana, prism,...

GHSA-8R9P-F939-6H3C vulnerabilities

Vulnerabilities for packages: code-server, homepage, configurable-http-proxy, azurite, opensearch-dashboards, commercial-gitlab-rails-ee-fips, kubeflow-pipelines, gitlab-rails-ce, lambda-nodejs, unleash-fips, unleash, lerna, langfuse, wazuh-dashboard-fips, nextcloud-server, kibana, prism,...

CVE-2026-111755 vulnerabilities

Vulnerabilities for packages: nextcloud-server, lerna, kubeflow-pipelines, prism, code-server, opensearch-dashboards, configurable-http-proxy...

CVE-2026-111756 vulnerabilities

Vulnerabilities for packages: nextcloud-server, lerna, kubeflow-pipelines, prism, code-server, opensearch-dashboards, configurable-http-proxy...

GHSA-Q3JH-WRC6-JGQ8 vulnerabilities

Vulnerabilities for packages: nextcloud-server, lerna, kubeflow-pipelines, prism, code-server, opensearch-dashboards, configurable-http-proxy...

GHSA-8R9P-F939-6H3C vulnerabilities

Vulnerabilities for packages: nextcloud-server, lerna, kubeflow-pipelines, prism, code-server, opensearch-dashboards, configurable-http-proxy...

Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App

Attackers exploited a flaw in an optional Nextcloud app, Collabora Online - Built-in CODE Server, to plant web shells on Nextcloud servers. Three administrators reported the issue on GitHub, with the first logged attack on September 10. A web shell is a small file that executes any command an...

CVE-2026-110447

Collabora Online Built-in CODE Server before 26.4.303 richdocumentscode, a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS command injection in proxy.php when the CODE server isn't...

CVE-2026-110447

Collabora Online Built-in CODE Server before 26.4.303 richdocumentscode, a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS command injection in proxy.php when the CODE server isn't...

CVE-2026-110447

Collabora Online Built-in CODE Server before 26.4.303 richdocumentscode, a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS command injection in proxy.php when the CODE server isn't...

EUVD-2026-100780

Collabora Online Built-in CODE Server before 26.4.303 richdocumentscode, a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS command injection in proxy.php when the CODE server isn't...

CVE-2026-110447

The Collabora Online Built-in CODE Server (Nextcloud app richdocumentscode ) is vulnerable to remote code execution (RCE) via an OS command injection in the proxy.php script. The flaw occurs specifically when the CODE server is not running, such as immediately after a restart, crash, or upgrade. ...

PT-2026-113607

Name of the Vulnerable Software and Affected Versions Collabora Online Built-in CODE Server richdocumentscode versions prior to 26.4.303 Description An OS command injection issue exists in the proxy.php endpoint of the richdocumentscode app. The flaw occurs when the built-in CODE server is not...

VulnCheck KEV: CVE-2026-110447

Collabora Online Built-in CODE Server before 26.4.303 richdocumentscode, a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS command injection in proxy.php when the CODE server isn't...