Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App

AI Summary

Attackers exploited CVE-2026-110447, a critical RCE flaw in the Collabora Online Built-in CODE Server (richdocumentscode) Nextcloud app, to plant web shells on Nextcloud servers, with the first confirmed attack logged on September 10, 2026 and at least three administrators independently reporting compromises on GitHub. Nextcloud administrators running the Collabora CODE integration should patch immediately and audit servers for web shell indicators.

Read full article → https://thehackernews.com/2026/10/hackers-backdoor…

Relevance score: 85.0/100

# More from October 16

1
Citizen Lab Traces Zero-Click Candiru Spyware Infections at Al Jazeera to Targeted Online Ads The Hacker News
2
Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation The Hacker News
3
Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability The Hacker News
4
Microsoft drops an actively exploited zero-day among record high of 1,413 vulnerabilities CyberScoop
5
U.S. Shuts Down Over 40 Laptop Farms, Charges 14 in North Korean IT Worker Fraud The Hacker News
6
Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing The Hacker News
8
Microsoft Disrupts 3 Phishing Kits Linked to Over 1 Billion Scam Messages The Hacker News
9
Fridge hack costing millions and sparking fires stemmed from poor security Ars Technica Security
10
UK Legal Aid Agency: Hackers stole records dating back to 1978 BleepingComputer