CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud
News Source : Internet
News Summary
- The u.s. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two vulnerabilities impacting Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrator to its Known Exploited Vulnerabilities ( KEV) As reported by The Hacker News, threat actors have been observed exploiting CVE-2026-110447 to backdoor Nextcloud servers with a web shell.
- In light of active exploitation, Federal Civilian Executive Branch (FCEB) agencies are recommended to apply the fixes by October 26, 2026, to secure their networks.
The U.S.
Never miss a story from us, subscribe to our newsletter