CISA Sets October 26 Deadline for Exploited Nextcloud CODE Server Flaw
CISA added CVE-2026-110447 to its Known Exploited Vulnerabilities catalog and requires federal agencies to remediate affected systems by October 26, 2026. The unauthenticated command-injection flaw affects only Nextcloud deployments using the optional Built-in CODE Server app below version 26.4.303, so contractors should verify deployment details and coordinate targeted remediation.