[{"data":1,"prerenderedAt":63},["ShallowReactive",2],{"sicherheitsluecke-cve-2026-110447":3},{"l":4,"details":28,"weitere":34,"indexierbar":61,"updated":62},{"cve":5,"status":6,"vendor":7,"product":8,"name":9,"added":10,"due":11,"ransomware":12,"published":13,"cwes":14,"cvss":16,"epss":21,"slug":24,"bereich":25,"schweregrad":26,"art":27,"produktLabel":8},"CVE-2026-110447","ausgenutzt","Collabora","Collabora Online – Built-in CODE Server","Collabora Online – Built-in CODE Server OS Command Injection Vulnerability","2026-10-23","2026-10-26",false,"2026-10-14",[15],"CWE-78",{"version":17,"score":18,"severity":19,"vector":20},"4.0",9.2,"CRITICAL","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",{"score":22,"percentile":23},0.73307,0.99465,"cve-2026-110447","web","kritisch","Einschleusen von Betriebssystem-Befehlen (OS Command Injection)",{"description":29,"refs":30},"Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS command injection in proxy.php when the CODE server isn't running (e.g., the product was recently restarted). The vulnerability is not present in standalone Collabora Online servers; only this deployment with CODE Server is affected.",[31],{"url":32,"host":33},"https:\u002F\u002Fhelp.nextcloud.com\u002Ft\u002Fto-collabora-built-in-user-update-asap\u002F250516","help.nextcloud.com",[35,45,54],{"cve":36,"status":6,"produktLabel":37,"vendor":38,"product":39,"art":40,"bereich":25,"schweregrad":41,"score":42,"epss":43,"added":44,"ransomware":12},"CVE-2026-111793","Openwave Webtop Media Transcoder","Openwave Messaging Limited","Webtop Media Transcoder","Fehlerhafte Weitergabe von Ressourcen","mittel",4.3,0.00274,"2026-11-10",{"cve":46,"status":6,"produktLabel":47,"vendor":48,"product":49,"art":50,"bereich":25,"schweregrad":26,"score":51,"epss":52,"added":53,"ransomware":12},"CVE-2026-116779","SignalWire FreeSwitch","SignalWire","FreeSwitch","Einschleusen von Befehlen (Command Injection)",9.8,0.02177,"2026-11-09",{"cve":55,"status":6,"produktLabel":56,"vendor":57,"product":58,"art":59,"bereich":25,"schweregrad":26,"score":51,"epss":60,"added":53,"ransomware":12},"CVE-2026-123218","IBM Aspera Faspex","IBM","Aspera Faspex","Fehlerhafte Berechtigungsprüfung",0.00705,true,"2026-11-12T13:05:11.283Z",1794488739191]