Critical Command Injection Vulnerability Actively Exploited in Nextcloud Collabora

A critical command injection vulnerability, CVE-2026-110447, affecting Nextcloud servers utilizing the built-in Collabora server, is being actively exploited. This flaw allows unauthenticated attackers to execute commands and install webshells. CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on October 23, 2026, mandating remediation by October 26, 2026, highlighting the urgent need for administrators to update or remove the affected application.