Vulnerabilities
CISA Flags Actively Exploited Critical Flaws (CVE-2026-110447) in Collabora Online and Arista VeloCloud Orchestrator
CISA has added two critical, actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog: a command injection flaw in Collabora's built-in CODE Server for Nextcloud and a SQL injection bug in Arista's VeloCloud Orchestrator. Patches are available for both.