C

Collabora

United Kingdom Commercial www.collabora.com ↗
C
CAUTION
10
Total CVEs
2
Crit / High
4
Medium
0%
Unpatched
50%
Patched
5.9
Avg CVSS
0
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB How we collect data →
// INTEL UPGRADE
Full Company Dossier — Coming Soon
Executive profiles, financial exposure, M&A risk, breach history & supply-chain threat mapping — all in one place.
OSINT FINANCIALS EXEC PROFILES BREACH DB
▸ CVE Trend by Year
▸ Patch Coverage
Patched
50%
Unpatched
0%
Pending
50%
✓ 1 patched ✗ 0 unpatched ⏳ 1 pending score
▸ Intelligence by Audience
PoC Available
1 / 20 shown
CISA KEV (Exploited)
0
Shodan Dorks
ssl:"collabora" port:443
org:"Collabora" http.status:200
Top EPSS (Exploitation Probability)
CVE-2026-110447 1.23% exploitation probability
CVE-2024-30265 0.73% exploitation probability
Quick Facts for Reporting
Total CVEs tracked
10
Critical severity
0
Actively exploited (CISA)
0
Unpatched ratio
0%
Avg CVSS score
5.9
Security grade
C (CAUTION)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-06-10
Security Risk Score (for investors)
LOW
Vuln Volume
GOOD
Patch Responsiveness
LOW
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
▸ Security News Google News
Hackers Exploit Critical Collabora Online Flaw to Backdoor Nextcloud Servers - CyberSecurityNews
CyberSecurityNews 6h ago
Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App - The Hacker News
The Hacker News 2d ago
Hackers Exploit Critical Nextcloud Collabora Flaw to Execute Remote Commands - Cyber Press
Cyber Press 1d ago
Critical Collabora Online Flaw Lets Attackers Execute Commands on Nextcloud Servers - GBHackers News
GBHackers News 1d ago
Techman Robot strengthens cybersecurity for collaborative robots in connected manufacturing environments - Today's Medical Developments
Today's Medical Developments 5d ago
Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers - BleepingComputer
BleepingComputer 1d ago
▸ Recent CVEs showing 20 of 2
CVE IDSeverityPatchEPSSDate
CVE-2026-110447 PoC ? N/A UNKNOWN / UNPATCHED 1.23% 2026-10-14
CVE-2024-30265 7.5 HIGH PATCHED / FIX AVAILABLE 0.73% 2024-04-03
View all 2 CVEs for Collabora →
▸Intel
HQCambridge, United Kingdom
Founded2003
CEOMichael Meeks
CountryUnited Kingdom
LicenseCommercial
Trust ScoreC — CAUTION
Max CVSS8.2
Last Updated2026-06-10
▸Top Weaknesses
CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))
Unknown Weakness Type
1 occurrence in Collabora CVEs (10% of total)
CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')) ⓘ
1
CWE-295
Unknown Weakness Type
1 occurrence in Collabora CVEs (10% of total)
CWE-295 ⓘ
1
CWE-862
Unknown Weakness Type
1 occurrence in Collabora CVEs (10% of total)
CWE-862 ⓘ
1
CWE-266
Unknown Weakness Type
1 occurrence in Collabora CVEs (10% of total)
CWE-266 ⓘ
1
CWE-94 (Improper Control of Generation of Code ('Code Injection'))
Unknown Weakness Type
1 occurrence in Collabora CVEs (10% of total)
CWE-94 (Improper Control of Generation of Code ('Code Injection')) ⓘ
1
CWE-200
Sensitive Information Exposure
1 occurrence in Collabora CVEs (10% of total)
CWE-200 ⓘ
1
CWE-22
Unknown Weakness Type
1 occurrence in Collabora CVEs (10% of total)
CWE-22 ⓘ
1
CWE-79
Cross-Site Scripting (XSS)
1 occurrence in Collabora CVEs (10% of total)
CWE-79 ⓘ
1
▸Company Profile

Collabora is a global software company specializing in open-source consulting, development, and support, best known for its work on Collabora Online, a cloud-based office suite built on LibreOffice. Their products are widely used in enterprise and government sectors for secure document collaboration, and they contribute significantly to the security and stability of key open-source projects like the Linux kernel and WebKit. From a cybersecurity perspective, Collabora's focus on secure remote document handling and their role in hardening open-source software make them relevant to threat intelligence.

▸Response Metrics
Est. MTTR ⓘ ~90 days (Average)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
CVE Trend ⓘ ↘ -33% better
CVE count 2026 vs 2025:  3 → 2 CVEs
Patch Speed ⓘ Poor (>65% open)
0% of CVEs still unpatched.  Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
▸ Financial Risk Estimate
Est. GDPR Low
€600K
Est. GDPR High
€6.0M

Based on 0 critical CVEs, 0 CISA KEV, 100% unpatched. Model: GDPR Art.83 · not legal advice.

▸Actions
⚖ Compare with another vendor
▸Embed Badge
Collabora C valtersit.com