CISA Adds Critical Vulnerabilities in Collabora Online and Arista VeloCloud to KEV List

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two critical vulnerabilities in Collabora Online and Arista VeloCloud to its Known Exploited Vulnerabilities (KEV) list, citing active exploitation in the wild. The flaws, with CVSS scores of 9.2 and others, pose significant risks to affected systems.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two vulnerabilities impacting Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrator (VCO) to its Known Exploited Vulnerabilities (KEV), citing reports of active exploitation in the wild.

The critical-severity vulnerabilities are listed below -

CVE-2026-110447 (CVSS score: 9.2) - An operating

Read original article