Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers

By Bill Toulas · BleepingComputer · Thursday, 15 October 2026 at 20:25 (3h ago) · Original article ↗

Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - Built-in CODE Server app (richdocumentscode) for Nextcloud. [...]

You're reading a preview. The full article is published by BleepingComputer on their website.

Read the full story on BleepingComputer

Security

Targeted ads delivered 0-click exploits to install mercenary malware

The incident is likely 1st confirmation of mercenary spyware delivered by targeted ads.

Ars Technica 2h ago

Security

Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory

A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher demonstrated the leak against Vercel's live cloud sandboxes, and Vercel confirmed it. The flaw, now tracked as CVE-2026-99999 and…

The Hacker News 3h ago

Security

Researchers warned attackers could 'defrost the food' months before French supermarkets got hit

They tried to sound the alarm in August

The Register 4h ago

Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers

More Security & Privacy

Targeted ads delivered 0-click exploits to install mercenary malware

Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory

Researchers warned attackers could 'defrost the food' months before French supermarkets got hit