CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud

Summary

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two vulnerabilities impacting Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrator (VCO) to its Known Exploited Vulnerabilities (KEV), citing reports of active exploitation in the wild. The critical-severity vulnerabilities are listed below - CVE-2026-110447 (CVSS score: 9.2) - An operating

Lotu Radar provides attributed news summaries and links to the original publisher. Full reporting and copyright remain with the source.