### Urgent Remediation for Collabora Online Users **CISA** has issued an alert regarding a newly identified vulnerability, **CVE-2026-110447**, affecting **Collabora Online**'s built-in CODE server. This OS command injection vulnerability is now part of the **KEV Catalog**, signifying its active exploitation by malicious actors. ### Understanding the Threat: CVE-2026-110447 **CVE-2026-110447** represents a significant security risk, as OS command injection vulnerabilities are frequently leveraged by attackers to gain unauthorized access and control over compromised systems. For organizations utilizing **Collabora Online**, immediate action is crucial to prevent potential breaches. ### CISA's Mandate and Broader Recommendations Under **Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk**, Federal Civilian Executive Branch (**FCEB**) agencies are mandated to prioritize the rapid remediation of high-risk vulnerabilities, especially those in the **KEV Catalog**. This directive specifically targets publicly exposed assets where exploitation could grant total control. While **BOD 26-04** applies directly to **FCEB** agencies, **CISA** strongly encourages all organizations, regardless of their federal affiliation, to adopt a similar risk-based vulnerability management strategy. Prioritizing the patching of **KEV Catalog** vulnerabilities is a critical step in bolstering an organization's cybersecurity posture. ### Contributing to Collective Security **CISA** continues to expand the **KEV Catalog** based on evidence of active exploitation and clear mitigation guidance. Organizations aware of exploited vulnerabilities not yet listed are encouraged to submit them through **CISA**'s KEV Nomination Form. This collaborative effort helps enhance the collective security of the digital ecosystem.