273 matches found
CVE-2026-121881 Posit Workbench code-server session-state RPC (get_last_seen) SQL injection
SQL injection vulnerability in the getlastseen code-server session-state RPC in Posit Software, PBC Posit Workbench before 2026.08.0 allows authenticated users to read arbitrary data from the Workbench database via the sessionIds parameter. NOTE: exploitation requires a valid authenticated sessio...
CVE-2026-121881
An SQL injection vulnerability exists in the get_last_seen code-server session-state RPC of Posit Workbench (versions before 2026.08.0 ) by Posit Software, PBC. The flaw is caused by improper handling of the sessionIds parameter, which allows authenticated users to read arbitrary data from the Wo...
Exploit for OS Command Injection in Collabora Collabora_Online_-_Built-In_Code_Server
CVE-2026-110447 — Collabora Online "Built-in CODE Server" ric...
Collabora Online Built-in CODE Server Before 26.4.303 OS Command Injection
Collabora Online Built-in CODE Server versions before 26.4.303 contain an unauthenticated OS command injection vulnerability in proxy.php that can result in remote code execution when the CODE server is not running...
Exploit for OS Command Injection in Collabora Online
CVE-2026-110447 - Nextcloud richdocumentscode RCE 1-day Una...
Collabora Online Built-in CODE Server 26.4.302 Command Injection
Collabora Online Built-in CODE Server versions before 26.4.303, bundled as the Nextcloud richdocumentscode app, contain an unauthenticated OS command injection in proxy.php when CODE is not running. The proof of concept writes and accesses a PHP web shell on the target...
Collabora Online built-in CODE server command injection
Added: 10/27/2026 Background Collabora Online is an online document editing suite. Collabora Online Development Edition CODE is the development version of Collabora Online. Problem The Collabora Online built-in CODE server contains a command injection vulnerability in proxy.php which is exploitab...
GHSA-RXP7-6HXX-X8Q5 vulnerabilities
Vulnerabilities for packages: unleash, prism, graalvm, lerna, node-red, npm, actions-runner, eco-jess, code-server, wazuh-dashboard-fips, unleash-proxy, wazuh-dashboard, renovate, homepage...
GHSA-RXP7-6HXX-X8Q5 vulnerabilities
Vulnerabilities for packages: prism, code-server, renovate, npm, lerna...
CVE-2026-111997 vulnerabilities
Vulnerabilities for packages: unleash, prism, graalvm, lerna, node-red, npm, actions-runner, eco-jess, code-server, wazuh-dashboard-fips, unleash-proxy, wazuh-dashboard, renovate, homepage...
GHSA-P3HM-X653-5RC6 vulnerabilities
Vulnerabilities for packages: unleash, prism, graalvm, lerna, node-red, npm, actions-runner, eco-jess, code-server, wazuh-dashboard-fips, unleash-proxy, wazuh-dashboard, renovate, homepage...
GHSA-P3HM-X653-5RC6 vulnerabilities
Vulnerabilities for packages: prism, code-server, renovate, npm, lerna...
CVE-2026-111997 vulnerabilities
Vulnerabilities for packages: prism, code-server, renovate, npm, lerna...
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-110447 Collabora Online – Built-in CODE Server OS Command Injection Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber...
Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
Collabora Collabora Online – Built-in CODE Server when used within the NextCloud platform contains an OS command injection vulnerability that allows for remote code execution when the CODE server isn't running...
GHSA-8R9P-F939-6H3C vulnerabilities
Vulnerabilities for packages: nextcloud-server, code-server, opensearch-dashboards-fips, kubeflow-pipelines, wazuh-dashboard, redisinsight, gitlab-rails-ce, opensearch-dashboards, nemo-skills, langfuse-fips, wazuh-dashboard-fips, lambda-nodejs, prism, lerna, kibana, langfuse, gitlab-rails-ce-fips...
GHSA-Q3JH-WRC6-JGQ8 vulnerabilities
Vulnerabilities for packages: nextcloud-server, code-server, opensearch-dashboards-fips, kubeflow-pipelines, wazuh-dashboard, redisinsight, gitlab-rails-ce, opensearch-dashboards, nemo-skills, langfuse-fips, wazuh-dashboard-fips, lambda-nodejs, prism, lerna, kibana, langfuse, gitlab-rails-ce-fips...
CVE-2026-111755 vulnerabilities
Vulnerabilities for packages: nextcloud-server, code-server, opensearch-dashboards-fips, kubeflow-pipelines, wazuh-dashboard, redisinsight, gitlab-rails-ce, opensearch-dashboards, nemo-skills, langfuse-fips, wazuh-dashboard-fips, lambda-nodejs, prism, lerna, kibana, langfuse, gitlab-rails-ce-fips...
CVE-2026-111756 vulnerabilities
Vulnerabilities for packages: nextcloud-server, code-server, opensearch-dashboards-fips, kubeflow-pipelines, wazuh-dashboard, redisinsight, gitlab-rails-ce, opensearch-dashboards, nemo-skills, langfuse-fips, wazuh-dashboard-fips, lambda-nodejs, prism, lerna, kibana, langfuse, gitlab-rails-ce-fips...