Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers

Threat actors are exploiting a critical command execution flaw, tracked as CVE-2026-110447, in the Collabora Online Built-in CODE Server app for Nextcloud. BleepingComputer reports the flaw is being used to backdoor Nextcloud servers.