October 15, 2026
- Administrators are reporting backdoored Nextcloud servers running Collabora’s Built-in CODE Server. The reports tie compromise to the
richdocumentscodeapp and a critical flaw in the bundled Collabora Online CODE component, making exposed hosts an incident-response case rather than patch-only work. GitHub issue, The Hacker News (discussion) · Active Exploitation
in A Crafted Attachment Can Root Cisco’s Secure Email Gateway