Collabora

Records20All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

Collabora records in CISA KEV

TI-2026-73868 Collabora Online – Built-in CODE Server OS Command Injection Vulnerability CRITICAL 99KEV 2026-10-23

Components

Products in the NVD configurations · select one to filter the records

Online 6 records MEDIUM Collabora Online - Built-in Code Server 2 records CRITICAL

Records

2 records in Collabora Online - Built-in Code Server · all components

TI-2026-73868 CVE-2026-110447 · GHSA-f97p-r72q-64h2

Collabora Online Built-in CODE Server allows remote code execution

CRITICAL 99KEV

Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66…

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.73307 Published 2026-10-14 Fixed in 26.4.303 CWE-78

TI-2025-40711 CVE-2025-66208

Configuration-Dependent RCE (OS Command Injection) in richdocumentscode proxy

MEDIUM 43

Collabora Online - Built-in CODE Server (richdocumentscode) provides a built-in server with all of the document editing features of Collabora Online.

CVSS 4.0HIGH 7.2 Network No auth No interaction EPSS 0.01833 Published 2025-12-03 Fixed in 25.04.702 CWE-78

Open these records in search →

Critical	2
High	9
Medium	9
Low	0
No CVSS	0