What’s Vulnerable › Products

Collabora Online - Built-in CODE Server vulnerabilities

2 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Collabora Online - Built-in CODE Server version is affected

Exploited Collabora Online - Built-in CODE Server vulnerabilities

• CVE-2026-110447 — Collabora Online – Built-in CODE Server OS Command Injection Vulnerability

Latest Collabora Online - Built-in CODE Server vulnerabilities

• CVE-2026-110447 — Collabora Online – Built-in CODE Server OS Command Injection Vulnerability (CVSS 9.8) — exploited
• CVE-2025-66208 — Configuration-Dependent RCE (OS Command Injection) in richdocumentscode proxy (CVSS 9.8)