~/article/hackers-exploit-collabora-rce-flaw-to-backdoor-nextcloud-servers-14yt2y

high2026-10-15 20:25 UTCSource: BleepingComputer

Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers

Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - Built-in CODE Server app (richdocumentscode) for Nextcloud.

Read at the source

Summary written for cymesh.dev. The full article lives at BleepingComputer.

Referenced CVEs

CVE-2026-110447

Topics

rce cloud cve malware

~/cymesh.net

This is what cymesh.net is for

Certificate and hostname problems are the ones you find out about from your users. cymesh.net finds them first.

monitorsTLS/SSL expiry, chain and hostnamealertsemail, ahead of the expiry datescopenon-intrusive, read-only checks

Open the console See cymesh.net

~/related/hackers-exploit-collabora-rce-flaw-to-backdoor-nextcloud-servers-14yt2y

2026-10-17 15:18 UTC[info]

Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack

BleepingComputersupply-chain cloud data-breach

2026-10-17 14:32 UTC[high]

Drupal patches critical RCE flaws, warns exploits may emerge soon

BleepingComputerrce

2026-10-17 06:16 UTC[info]

Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants

The Hacker Newscloud windows

2026-10-16 20:00 UTC[high]

Critical BlockStrap flaw lets hackers run code on Magento servers

BleepingComputerCVE-2026-103849cve

2026-10-16 16:43 UTC[info]

Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoor

The Hacker Newsmalware windows

2026-10-16 14:09 UTC[info]

In Other News: ICS-Sniper Attack, Hacking XWorm Malware Operators, $250k Chrome Exploit

SecurityWeekmalware iot