OS Command Injection in Collabora Online (CVE‑2026‑110447) Added to CISA KEV Catalog
CISA has listed CVE‑2026‑110447, a command‑injection flaw in Collabora Online’s CODE Server, in its Known Exploited Vulnerabilities catalog. The vulnerability grants attackers total control of the host, prompting federal agencies to prioritize rapid remediation and urging all organizations to adopt risk‑based patching. This underscores the importance of robust vulnerability‑management controls for audit readiness.
ADTP Breach Watch· October 23, 2026· CISA Advisories
SeverityHigh
Type🏛️ Vulnerability
ConfidenceHigh
ReportedOct 23, 2026
Technology & SaaSTECH_SAASVulnerability Exploit
What happened
CISA announced that CVE‑2026‑110447, an OS command‑injection vulnerability in Collabora Online’s built‑in CODE Server, is being actively exploited. The flaw allows an attacker to execute arbitrary commands on the underlying operating system, effectively taking full control of the affected asset.
Why it matters for trust and compliance
The incident tests the vulnerability‑management control objective—identifying, prioritizing, and remediating high‑risk flaws—which maps to multiple frameworks and provides the evidentiary backbone for audit‑ready trust.
Continuous monitoring of KEV additions ensures timely patching and demonstrates due‑diligence to auditors.
Documented remediation evidence creates a defensible audit trail across frameworks.
Who is affected
TECH_SAAS
Recommended actions
Run an inventory to locate all Collabora Online CODE Server instances.
Apply the vendor‑released patch or mitigate with network segmentation immediately.
Log remediation steps and dates in a centralized Trust Center for audit evidence.
Integrate KEV feed monitoring into your vulnerability‑management workflow.
Details
CVEs
CVE-2026-110447
Regulations library
Every US state privacy law, on one map
24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.