CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two vulnerabilities impacting Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrator (VCO) to its Known Exploited Vulnerabilities (KEV), citing reports of active exploitation in the wild. The critical-severity vulnerabilities are listed below - CVE-2026-110447 (CVSS score: 9.2) - An operating

Read on The Hacker News

On 10/24/2026, 03:25 PM, The Hacker News published "CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud" (type: Security news). Severity is "Critical" (critical). Related technologies: Arista / VeloCloud. CVE: CVE-2026-110447.