---
id: CVE-2026-110447
title: >-
  Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a
  Nextcloud app, allows remote code execution, as exploited in the wild in
  September and October 2026, a different vulnerability than CVE-2025-66208
summary: >-
  Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a
  Nextcloud app, allows remote code execution, as exploited in the wild in
  September and October 2026, a different vulnerability than CVE-2025-66208.
  This is an O…
severity: none
cwe:
  - CWE-78
published: '2026-10-14'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T03:17:20.683'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-110447'
references:
  - url: 'https://github.com/CollaboraOnline/richdocumentscode/issues/354'
    label: cve@mitre.org
  - url: 'https://help.nextcloud.com/t/to-collabora-built-in-user-update-asap/250516'
    label: cve@mitre.org
tags:
  - nvd
  - in-the-wild
exploited: true
ingestedAt: '2026-10-14T04:12:54.303Z'
---

## Overview

Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS command injection in proxy.php when the CODE server isn't running (e.g., the product was recently restarted). The vulnerability is not present in standalone Collabora Online servers; only this deployment with CODE Server is affected.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.