## CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud

- 種別: news
- 重大度: critical
- 関連技術: arista
- CVE: CVE-2026-110447
- 公開日時: 2026-10-24T06:25:57.000Z
- 情報源: The Hacker News (https://thehackernews.com/2026/10/cisa-flags-two-actively-exploited.html)
- パーマリンク: https://vulnpulse.app/items/thehackernews-ad7396463092

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two vulnerabilities impacting Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrator (VCO) to its Known Exploited Vulnerabilities (KEV), citing reports of active exploitation in the wild. The critical-severity vulnerabilities are listed below - CVE-2026-110447 (CVSS score: 9.2) - An operating