CVE-2026-110447

The Collabora Online Built-in CODE Server (a Nextcloud app) versions before 26.4.303 are vulnerable to remote code execution due to an OS command injection in proxy.php. This flaw occurs specifically when the CODE server is not running, such as immediately after a product restart. The vulnerabili...