Nextcloud's Collabora CODE app lets unauthenticated attackers drop PHP web shells via proxy.php. https://intel.threadlinqs.com/threat/TL-2026-3542 #ThreatIntel #CVE_2026_110447 #CVE_2025_66208 #Nextcloud