Login Request a demo
ON
Product
online
by CollaboraOnline · last CVE Feb 5, 2026
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 1High 2Medium 3Low 0
Severity
All severities6Critical1High2Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add online to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-66208
9.8
2%
Dec 3
Configuration-Dependent RCE (OS Command Injection) in richdocumentscode proxy
Affected: < 25.04.702
CVE-2025-27791
8.3
0%
Apr 15
Collabora Online Vulnerable to Arbitrary File Write
Affected: >= 24.04.1.1, < 24.04.13.1; >= 23.05.0, < 23.05.19; < 22.05.25
CVE-2024-37311
8.2
0%
Aug 23
Collabora Online's remote host TLS certificates are not fully verified
Affected: >= 24.04.1.1, < 24.04.4.3; >= 23.05.0-1, < 23.05.14-1; < 22.05.23.1
CVE-2025-24796
6.3
1%
Mar 6
Remote Code Execution within Collabora Online jail with Macros Enabled
Affected: < 22.05.25; >= 23.05.1, < 23.05.19; >= 24.04.1.1, < 24.04.12.4
CVE-2024-45045
6.1
0%
Aug 29
JavaScript Injection via url encoded values in links in Collabora Office Android
Affected: Collabora Office (Android): < 24.04.6.2
CVE-2026-23623
5.3
0%
Feb 5
Collabora Online vulnerable to Authorization Bypass
Affected: Collabora Online < 25.04.7.5; Collabora Online < 24.04.17.3; Collabora Online < 23.05.20.1; Collabora Online Development Edition < 25.04.08.2
Showing 6