cve | cybersecurity | Threat Intelligence | zero day Collabora CVE-2026-110447: Nextcloud Web Shells, Deadline Today By CVE-2026-110447 lets unauthenticated attackers run commands on Nextcloud servers that use the Collabora Built-in CODE Server app. CISA’s deadline is today. Upgrade or remove the app, then hunt for shx*.php web shells.
