{
  "id": "CVE-2026-110447",
  "vendor_project": "Collabora",
  "product": "Collabora Online \u2013 Built-in CODE Server",
  "description": "Collabora Collabora Online - Built-in CODE Server when used within the NextCloud platform contains an OS command injection vulnerability that allows for remote code execution when the CODE server isn't running.",
  "kev_date_added": "2026-10-23",
  "cvss": 9.0,
  "severity": "High",
  "advisories": [],
  "cited_in_cases": [],
  "indictment_cited": false
}