The Nextcloud Collabora flaw fires while the editor is stopped, which is exactly what a restart does
2026-10-26Security
CVE-2026-110447 is an unauthenticated command injection in the built-in CODE server, scored 9.2 and exploited since September. Disabling the app does not fix it, and the federal deadline is today.