Collabora Online OS Command Injection Vulnerability Added to CISA KEV Catalog
In short: CISA has officially added CVE-2026-110447, an OS Command Injection vulnerability affecting the Collabora Online Built-in CODE server, to its Known Exploited Vulnerabilities (KEV) catalog due to evidence of active exploitation in the wild.
This summary was generated automatically by AI from CISA Advisories's publication. It is our own text, not a copy of the original — facts, figures and quotes belong to the source, linked above and below.
What changed?
- 1Added CVE-2026-110447 to CISA KEV Catalog.
- 2Vulnerability identified as OS Command Injection in Collabora Online Built-in CODE server.
Why it matters
This vulnerability allows attackers to gain total control over affected assets. Because it is now confirmed to be actively exploited, organizations using Collabora Online must prioritize patching to mitigate the risk of unauthorized system access.
What it means for AI agents and contact centers
Check your infrastructure for any instances of Collabora Online or CODE server. If identified, apply security patches immediately as this vulnerability is actively exploited.
Sources
- CISA AdvisoriesOfficialPrimary sourceOriginal article →„CISA Adds One Known Exploited Vulnerability to Catalog“23 Oct 2026, 15:00Licence: US federal government work (17 U.S.C. §105) · our summary (content changed)
- Published by source
- 23 Oct 2026, 15:00
- Found by our system
- 23 Oct 2026, 23:39
- Summary generated
- 23 Oct 2026, 23:40
This article was written by AI from the original source. Facts, numbers and prices come from the source; missing values are marked “Not specified”. Legal notice, copyright and privacy