Collabora
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Collabora Online - Built-in CODE Server | 1 | 1 | Oct 14, 2026 |
| KodExplorer | 1 | – | Apr 19, 2026 |
Exploited and recent CVEs
- CVE-2026-110447 Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerabil 73.3%
- CVE-2026-6572 Collabora KodExplorer fileUpload Endpoint share.class.php improper authorization 0.3%