Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

Blog · 2-hour update · 2026-10-23

CVE-2026-110447 Collabora Online – Built-in CODE: exploited in the wild, how to patch

Most urgent: CVE-2026-110447: Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
Critical severity (CVSS 9.2), exploited in the wild, remotely exploitable, no login needed. Recommended action: apply the vendor mitigation.

On 23 October 2026, 18 new CVEs were published that we track: 0 critical, 2 already exploited in the wild (CISA KEV) and 2 with a fix or vendor patch available. Each one is ranked by severity, exploitation signals and how easy it is to reach, so you can patch the right ones first.

What happened in this 2-hour window: the most serious item is CVE-2026-110447 in Collabora Online – Built-in CODE Server (critical, CVSS 9.2, priority 82/100). Recommended action: apply the vendor mitigation. 2 new CVEs from the list below are already being exploited (CVE-2026-110447, CVE-2026-66384), so those go first. 3 of the 8 top items can be attacked remotely without a login. 2 of 18 new CVEs already have a fix or vendor patch; for the other 16, follow the downgrade or mitigation steps until one ships.

Patch these first

CVE-2026-110447: Collabora Online – Built-in CODE Server OS Command Injection Vulnerability

Critical severity (CVSS 9.2), priority 82/100 (patch now). Signals: critical severity; exploited in the wild (cisa kev); cisa ssvc: automatable with total technical impact. Recommended action: apply the vendor mitigation for Collabora Collabora Online – Built-in CODE Server.

References: NVD

CVE-2026-66384: JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability

Medium severity (CVSS 5.3), priority 56/100 (patch now). Signals: exploited in the wild (cisa kev). Recommended action: upgrade to 7.146.35, 7.161.16 for jfrog artifactory.

References: NVD · Release Notes, Vendor Advisory · Vendor Advisory

CVE-2026-79977: The WireGuard VPN service in subsys/net/lib/wireguard/wg.c updated the peer endpoint from a message it could n

High severity (CVSS 8.2), priority 34/100 (routine). Signals: high severity; remotely exploitable, no login, no user action. Recommended action: apply the vendor mitigation.

References: NVD

CVE-2026-79982: The Bluetooth HCI USB transport class of the new USB device stack, subsys/usb/device_next/class/bt_hci.c, copi

High severity (CVSS 8.8), priority 31/100 (routine). Signals: high severity. Recommended action: apply the vendor mitigation.

References: NVD

CVE-2026-115775: Twisted is an event-based framework for internet applications, supporting Python 3.6+

High severity (CVSS 8.7), priority 30/100 (routine). Signals: high severity. Recommended action: apply the vendor mitigation.

References: NVD

CVE-2026-79981: The DNS stub resolver in subsys/net/lib/dns/resolve.c binds one UDP socket per configured server when the reso

Medium severity (CVSS 6.5), priority 28/100 (routine). Signals: remotely exploitable, no login, no user action. Recommended action: apply the vendor mitigation.

References: NVD

CVE-2026-79979: The arm64 MMU backend invalidates a single virtual address from the TLB with invalidate_tlb_page() in arch/arm

High severity (CVSS 7.8), priority 27/100 (routine). Signals: high severity. Recommended action: apply the vendor mitigation.

References: NVD

CVE-2026-115778: Twisted is an event-based framework for internet applications, supporting Python 3.6+

High severity (CVSS 7.5), priority 26/100 (routine). Signals: high severity. Recommended action: apply the vendor mitigation.

References: NVD

How to act on this list

  1. Start with anything marked exploited or patch now.
  2. Check what you run: see how to check a version and patch it on Linux, Windows, pip and npm.
  3. Prefer the vendor or distro fix. If none exists, read when to downgrade and when to mitigate.
  4. Verify afterwards. Distros often fix a flaw without changing the upstream version, here is how to confirm.

FAQ

What is the most serious vulnerability published on 23 October 2026?

CVE-2026-110447 (Collabora Online – Built-in CODE Server OS Command Injection Vulnerability) ranks highest, with a priority score of 82/100. Recommended action: apply the vendor mitigation.

Are any of the new CVEs exploited in the wild?

Yes, 2 of the new CVEs appear on the CISA Known Exploited Vulnerabilities list. Patch those first.

Should I downgrade if there is no fix yet?

Only when an older release is confirmed unaffected and the package is not a core system component. Downgrades can break dependent software, so test first and hold the package until a fix ships.

Sources

← All posts