SecurityBleepingComputerabout 1 hour ago
Hackers Exploit Collabora Flaw to Backdoor Nextcloud
3 min read
Threat actors exploited CVE-2026-110447 in the Collabora Online server app for Nextcloud starting mid-September. Attacks targeted the proxy.php endpoint to inject OS commands, with a fix released on September 11. A community warning followed on October 3, noting a delay caused by GitHub CVE-processing backlogs.
Level
Hype check
Tap to vote and see what everyone thinks.
