CISA Known Exploited Vulnerabilities

CVE-2026-110447: Collabora Online – Built-in CODE Server OS Command Injection Vulnerability

Friday, 23 October

Collabora Collabora Online – Built-in CODE Server when used within the NextCloud platform contains an OS command injection vulnerability that allows for remote code execution when the CODE server isn't running.

Summary from the publisher's feed.

Code execution

Read at CISA Known Exploited Vulnerabilities All news

More in Exploited now

10 NovCVE-2026-124194: Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action VulnerabilityCISA Known Exploited Vulnerabilities
10 NovCVE-2026-111793: Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres VulnerabilityCISA Known Exploited Vulnerabilities
10 NovCVE-2026-20320: Cisco BroadWorks Improper Restriction of XML External Entity Reference VulnerabilityCISA Known Exploited Vulnerabilities
10 NovCVE-2026-111560: Barracuda Networks Multiple Products OS Command Injection VulnerabilityCISA Known Exploited Vulnerabilities
10 NovCVE-2026-116606: Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel VulnerabilityCISA Known Exploited Vulnerabilities
10 NovCVE-2026-125350: Google Chromium Use-After-Free VulnerabilityCISA Known Exploited Vulnerabilities
9 NovCVE-2026-102895: GPUStack Improper Authentication VulnerabilityCISA Known Exploited Vulnerabilities
9 NovCVE-2026-123158: OpenBSD OpenSSH Unexpected Status Code or Return Value VulnerabilityCISA Known Exploited Vulnerabilities