CVE-2026-110447 — Nextcloud: exploited since September 10, the Collabora flaw wasn't disclosed until October 14

Not listed so far in CISA’s catalog of actively exploited vulnerabilities.

Our analyses

Nextcloud: exploited since September 10, the Collabora flaw wasn't disclosed until October 14

A critical flaw in Collabora's editor built into Nextcloud was used to plant backdoors on servers. Here's how to tell whether yours is affected, and what to do.

Oct 16, 20263 min read

What to do

Check whether your estate includes the affected product, including internet-facing devices.
Apply the vendor’s patch or mitigations (references below).
Watch for exploitation: this entry is updated if the vulnerability enters the exploited catalog or is the subject of a CERT-FR alert.

References

NVD entry (NIST)