CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud
Summary
CISA has added two critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. These flaws affect Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrator, and both are reportedly being actively exploited in the wild.
IFF Assessment
The active exploitation of critical vulnerabilities poses a direct threat to organizations, increasing the risk of successful cyberattacks.
Severity
The article explicitly mentions a CVSS score of 9.2 for CVE-2026-110447, indicating a critical severity vulnerability with high attack vector and impact.
CISA KEV: Listed as actively exploited. Federal patch due: October 26, 2026. Known ransomware use: Unknown.
Defender Context
Defenders should prioritize patching or mitigating these identified vulnerabilities in Collabora Online and Arista VeloCloud environments. Active exploitation means these flaws are being used in real-world attacks, making immediate attention crucial to prevent compromise.