CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud

Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two vulnerabilities impacting Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrator (VCO) to its Known Exploited Vulnerabilities (KEV), citing reports of active exploitation in the wild. The critical-severity vulnerabilities are listed below - CVE-2026-110447 (CVSS score: 9.2) - An operating

Published 24-Oct-2026 09:47 UTC · First seen 24-Oct-2026 09:46 UTC

Sources

• CISA Known Exploited Vulnerabilities Catalog · 23-Oct-2026
• The Hacker News · 24-Oct-2026