> TritonInfoSec News
Home / Oct 17, 2026 / Story
0
#10 BleepingComputer general October 15, 2026 at 20:25 UTC

Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers

By Bill Toulas

AI Summary

Threat actors are actively exploiting CVE-2026-110447, a critical remote code execution flaw in the Collabora Online Built-in CODE Server (richdocumentscode) plugin for Nextcloud, to install backdoors on servers. Nextcloud is widely deployed across enterprises and government organizations for self-hosted file sharing, making this a high-impact target. Administrators should update the richdocumentscode app immediately and audit servers for signs of compromise.

Read full article → https://www.bleepingcomputer.com/news/security/hac…

Relevance score: 72.0/100

# More from October 17

  1. 1
    China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers The Hacker News
  2. 2
    Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoor The Hacker News
  3. 3
    Targeted ads delivered 0-click exploits to install mercenary malware Ars Technica Security
  4. 4
    Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory The Hacker News
  5. 5
    OpenAI Models Hacked Data Portals, Raided a Crypto Wallet to Finish Tasks SecurityWeek
  6. 6
    Proofpoint Inks $6.3 Billion All-Cash Deal to Acquire Varonis SecurityWeek
  7. 7
    BAE Systems cyberattack disrupts US federal court operations BleepingComputer
  8. 8
    PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions The Hacker News
  9. 9
    GhostAction Compromises About 1,900 GitHub Accounts, Targets Over 30,000 Repositories The Hacker News