threat/intelligence

Index

All dossiers

Every published dossier and chain dossier. Filter by exploitation status or vendor.

StatusAll Active exploitation PoC public Patched, monitoring Archived

VendorAll Adobe BerriAI BeyondTrust Cisco Citrix Collabora Drupal GitLab Ivanti Linux Node.js (Google Brotli)PHP Group SonicWall WordPress

Dossiers

CVE-2026-110447CRITICAL

Collabora Online Built-in CODE Server (richdocumentscode) OS command injection in proxy.php

Unauthenticated OS command injection in the Nextcloud Built-in CODE Server app, exploited since 2026-09-10 to drop PHP web shells.

Updated 2026-11-11

Chain dossiers

No published chain dossiers match these filters.