Threat advisoriesCritical
Threat actors exploit critical Collabora RCE flaw to backdoor Nextcloud servers
Attackers are exploiting CVE-2026-110447, a critical command execution vulnerability in Nextcloud's Collabora app, to deploy webshells and search for credentials since mid-September.