CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud
This story is only covered by news sources that have yet to be evaluated by the independent media monitoring agencies we use to assess the quality and reliability of news outlets on our platform. Learn more here.5 Articles
5 Articles
The CISA has included in its KEV catalog a collaborative online vulnerability that is already being exploited against Nextcloud servers. The bug, CVE-2026-110447, has a CVSS score of 9.2 and allows an attacker without authenticating execute commands on the operating system. U.S. federal agencies have until next Monday October 26th to patch. The nuance that almost nobody looks at: the bug is only exploited with the CODE server stopped The vector …
U.S. CISA adds Collabora Online flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Collabora Online flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini October 24, 2026 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Collabora Online flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Collabora Collabora Online – Built-in CODE Server flaw, tracked as CVE-2026-110447 (CVSS score
The Hacker News
IT Security News - cybersecurity, infosecurity newsCISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two vulnerabilities impacting Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrator (VCO) to its Known Exploited Vulnerabilities (KEV), citing reports of active exploitation in the wild. The critical-severity vulnerabilities are listed below CVE-2026-110447 (CVSS score: 9.2) - An operating
Coverage Details
Bias Distribution
- There is no tracked Bias information for the sources covering this story.
Factuality
To view factuality data please Upgrade to Premium
