Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Collabora Online is a collaborative online office suite based on LibreOffice technology. Prior to Collabora Online Development Edition version 25.04.08.2 and prior to Collabora Online versions 23.05.20.1, 24.04.17.3, and 25.04.7.5, a user with view-only rights and no download privileges can obtain a local copy of a shared file. Although there are no corresponding buttons in the interface, pressing Ctrl+Shift+S initiates the file download process. This allows the user to bypass the access restrictions and leads to unauthorized data retrieval. This issue has been patched in Collabora Online Development Edition version 25.04.08.2 and Collabora Online versions 23.05.20.1, 24.04.17.3, and 25.04.7.5.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
CVE-2026-23623 Collabora Online is a collaborative online office suite based on LibreOffice technology. Prior to Collabora Online Development Edition version 25.04.08.2 and prior to… https://www.cve.org/CVERecord?id=CVE-2026-23623
Post summary
The text announces CVE-2026-23623 for Collabora Online, noting affected versions and linking to the CVE record, but provides no further technical details or evidence of exploitation.
CVE-2026-23623 Unauthorized File Download Bypass in Collabora Online via Keyboard Shortcut https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-23623
Post summary
The text announces CVE-2026-23623, describing an unauthorized file download bypass in Collabora Online that can be triggered with a keyboard shortcut. No PoC, exploit, or patch information is provided.