CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud

The US Cybersecurity and Infrastructure Security Agency CISA on Friday added two vulnerabilities impacting Collabora Online Builtin CODE Server and Arista VeloCloud Orchestrator VCO to its Known Exploited Vulnerabilities KEV citing reports of active exploitation in the wild The criticalseverity vulnerabilities are listed below CVE2026110447 CVSS score 92 An operating