Online - Built-in CODE Server
1 CISA KEV deadline is open. The nearest is CVE-2026-110447 in Online - Built-in CODE Server, due today. Coverage is above its usual rate: 3 articles in 7 days, against a weekly average of 0.5.
Tracked since 14 Oct · latest article Sat 24 Oct · RSS
Exploited, by due date
CSV download7 articles from 4 outlets since 14 Oct; 3 in the last 7 days.
- Article
- First report
- Official notice
Show as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Sat 24 Oct · 18:30 UTC | Security Affairs | CISA Flags Exploited Collabora Online Flaw for Urgent Patching |
| Sat 24 Oct · 08:18 UTC | The Hacker News | CISA Warns of Active Attacks on Nextcloud and Arista Flaws |
| Fri 23 Oct · 20:32 UTC | CISA | CISA Flags Actively Exploited Nextcloud Code Injection Flaw |
| Mon 19 Oct · 15:14 UTC | The Hacker News | Attackers Exploited BeyondTrust Zero Day as Crypto Wallets Were Backdoored |
| Wed 14 Oct · 19:26 UTC | The Hacker News | Hackers Exploited Nextcloud Flaw to Plant PHP Web Shells |
| Wed 14 Oct · 11:01 UTC | SecurityOnline | Microsoft Ends Windows 11 24H2 Support for Consumers in October 2026 |
| Wed 14 Oct · 04:36 UTC | SecurityOnline | Attackers Exploit Nextcloud Collabora Flaw to Plant Webshells |
Who reported 4 outlets, last 12 months
- The Hacker News3
- SecurityOnline2
- CISA1
- Security Affairs1
- CISA Flags Exploited Collabora Online Flaw for Urgent PatchingSecurity Affairs
- CISA Warns of Active Attacks on Nextcloud and Arista FlawsThe Hacker News
- CISA Flags Actively Exploited Nextcloud Code Injection FlawCISA · official notice
- Attackers Exploited BeyondTrust Zero Day as Crypto Wallets Were BackdooredThe Hacker News
- Hackers Exploited Nextcloud Flaw to Plant PHP Web ShellsThe Hacker News
- Microsoft Ends Windows 11 24H2 Support for Consumers in October 2026SecurityOnline
- Attackers Exploit Nextcloud Collabora Flaw to Plant WebshellsSecurityOnline
All CVEs in coverage
1How these numbers are made
CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.
CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.
Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.
Product names are grouped by normalised names, with version and edition tails removed.
Fix listed refers to an advisory. Unknown fix status is counted as not listed.