Collabora Built-in CODE Server < 26.4.303 - OS Command Injection

Collabora Online Built-in CODE Server before 26.4.303 contains a command injection caused by improper handling in proxy.php when the CODE server is not running, letting remote attackers execute OS commands, exploit requires CODE server to be stopped. id: CVE-2026-110447 info: name: Collabora...