Collabora Online vulnerabilities

• collabora online - built-in code server, online – built-in code server +1 more Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app,... CVE-2026-110447 In KEVPublic exploit EPSS 73.3% 9.2 CriticalOctober 14, 2026
• collabora online - built-in code server, collaboraonline online +1 more Configuration-Dependent RCE (OS Command Injection) in richdocumentscode proxy CVE-2025-66208 7.2 HighDecember 3, 2025
• collabora online JavaScript Injection via url encoded values in links in Collabora Office Android CVE-2024-45045 6.3 MediumAugust 29, 2024
• collabora online Sensitive Information Disclosure (JailID) to users in Collabora Online CVE-2024-25114 2.6 LowMarch 11, 2024
• collabora online Reflected XSS vulnerability in CollaboraOnline CVE-2023-31145 4.3 MediumMay 15, 2023
• collabora online Reflected Cross-Site-Scripting vulnerability in Collabora Online CVE-2021-43817 8.2 HighDecember 13, 2021
• collabora online Reflected Cross-Site-Scripting vulnerability CVE-2021-32745 7.3 HighJuly 21, 2021
• collabora online Unauthenticated attacker could gain access to currently open files CVE-2021-32744 9.8 CriticalJuly 21, 2021