CVE-2026-48164 | Collabora Online up to 24.04.17/25.04.10 HTML Encoding cool.html host_session_id HTML injection

October 30, 2026 Yanac

A vulnerability described as problematic has been identified in Collabora Online up to 24.04.17/25.04.10. This vulnerability affects unknown code of the file cool.html of the component HTML Encoding. The manipulation of the argument host_session_id results in HTML injection.

This vulnerability was named CVE-2026-48164. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More