Wire · regulatory
U.S. CISA adds Collabora Online flaw to its Known Exploited Vulnerabilities catalog
◆ Sectors
◆ Geography
◆ Source
◆ Verified
Fusion42 · 24 October 2026 · Fusion42 review
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a critical OS command injection flaw in Collabora Online's Built-in CODE Server to its Known Exploited Vulnerabilities catalog, requiring immediate patching by federal agencies by October 26, 2026. The vulnerability allows unauthenticated attackers to execute commands during server downtime, with confirmed exploitation since September 2026.
This Wire brief sits within Fusion42's coverage of Cybersecurity, and 2 sources have reported it.
◆ ◆ The Wire takeaway
You must update Collabora Online immediately or lose federal contracts in the US after CISA mandated a fix for a critical backdoor exploited since September. Leaving old versions risks your clients' networks and your access to government markets.
◆ Coverage
2 sources · 24 Oct 2026
◆ Related on Wire
◆ Topics