CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud

Image for article CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud
News Source : Internet

News Summary

  • The u.s. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two vulnerabilities impacting Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrator to its Known Exploited Vulnerabilities ( KEV) As reported by The Hacker News, threat actors have been observed exploiting CVE-2026-110447 to backdoor Nextcloud servers with a web shell.
  • In light of active exploitation, Federal Civilian Executive Branch (FCEB) agencies are recommended to apply the fixes by October 26, 2026, to secure their networks.
The U.S.

Must read Articles