Vulnerabilities
Summary — last 7 days
New vulnerabilities3,615▼ 1,060 vs. last week
Critical / high1,429▼ 1,221 vs. last week
New active exploitation (KEV)7→ no change vs. last week
Unscored (no CVSS)701▲ 641 vs. last week
More filters
3 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Critical (9.2) | 1.2% | PoC | Collabora RichdocumentscodeAI | 10/14/2026 | 10/16/2026 | Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS command injection in proxy.php when the CODE server isn't running (e.g., the… | |
| Modified | High (7.2) | 0.50% | — | Collaboraoffice Richdocumentscode | 12/8/2023 | 6/17/2026 | Collabora Online is a collaborative online office suite based on LibreOffice technology. Unlike a standalone dedicated Collabora Online server, the Built-in CODE Server (richdocumentscode) is run without chroot sandboxing. Vulnerable versions of the richdocumentscode app can be susceptible to attack via modified… | |
| Modified | Medium (6.1) | 0.41% | — | Collaboraoffice Richdocumentscode | 12/8/2023 | 6/17/2026 | Collabora Online is a collaborative online office suite based on LibreOffice technology. Users of Nextcloud with `Collabora Online - Built-in CODE Server` app can be vulnerable to attack via proxy.php. The bug was fixed in Collabora Online - Built-in CODE Server (richdocumentscode) release 23.5.601. Users are advised… |