[ SECURITY ADVISORY DOSSIER // CIAMISKAB-CSIRT ]

Security Advisory CVE-2026-110447

CVE-2026-110447 Critical CVSS 9.2

Kembali ke Katalog Advisories

Ringkasan Kerentanan (Vulnerability Overview)

Rilis: 24 October 2026

Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a different vulnerability than CVE-2025-66208. This is an OS command injection in proxy.php when the CODE server isn't running (e.g., the product was recently restarted). The vulnerability is not present in standalone Collabora Online servers; only this deployment with CODE Server is affected.

Tindakan Mitigasi yang Wajib Diterapkan (Required Action)

Instruksi Keamanan untuk Pengelola TI / OPD

Terapkan pembaruan keamanan resmi dari vendor sesegera mungkin.

Seluruh pengelola server dan aplikasi di lingkungan OPD Kabupaten Ciamis diimbau untuk segera mengaudit perangkat terdampak dan mengaplikasikan patch sebelum batas waktu mitigasi.

Produk & Versi Terdampak

Produk	Versi Basis	Batas Terdampak	Status Keamanan
Collabora Online - Built-in CODE Server	0	26.4.303	AFFECTED

[ BAGIKAN PERINGATAN KE TIM TEKNIS ]

WhatsApp Telegram

Threat Intelligence Matrix

CVE Identifier

CVE-2026-110447

Vendor / Project Collabora

Produk Terdampak Collabora Online - Built-in CODE Server

Skor CVSS

9.2 / 10.0

Status Eksploitasi Belum Terdeteksi

Kampanye Ransomware Tidak Diketahui

Automatable (Wormable) Unknown

Dampak Teknis Total

Sumber Intelijen CIRCL / NVD

Butuh Pendampingan Mitigasi?

Tim Ciamiskab-CSIRT siap mendampingi verifikasi kerentanan dan langkah pengamanan aset digital OPD Anda.

Lapor ke CSIRT WhatsApp Hotline CSIRT

Peringatan Lainnya

CVE-2026-114625 Critical

Security Advisory 0199

CVE-2026-17544 High

Out-of-bounds write in bccomp() via crafted operand and scale

CVE-2026-17543 High

SQL injection in ext-pgsql via E'...' backslash breakout

CVE-2026-7260 Medium

Stack overflow in phar with circular symlinks

CSIRT Assistant

Halo 👋 Ada yang bisa saya bantu? Jika perlu, chat ini bisa diteruskan ke admin.