Will CVE-2026-110447 (Collabora Online RCE) be actively exploited by end of 2026?

CISA added CVE-2026-110447 (Collabora Online OS Command Injection) to its Known Exploited Vulnerabilities (KEV) catalog, confirming active exploitation. This is a critical command injection flaw in a widely-used online office suite that enables remote code execution.

Resolution Criteria

Will be resolved YES if public evidence (CISA KEV confirmation, vendor advisory, independent researcher report, or security researcher publication) documents active exploitation in the wild by any threat actor or security researcher by end of 2026. NO if no exploitation is documented.