CISA Flags Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, citing active exploitation in the wild. These include CVE-2026-110447 in Collabora Online Built-in CODE Server, which allows remote code execution in Nextcloud deployments, and CVE-2026-114625, an SQL injection vulnerability in on-premise versions of Arista VeloCloud Orchestrator.

Context

CISA's Known Exploited Vulnerabilities catalog serves as a resource for organizations to understand and mitigate risks from known security flaws. The vulnerabilities in Collabora Online and Arista VeloCloud are particularly concerning due to their potential for remote code execution and SQL injection, which can compromise system integrity. These issues reflect broader challenges in maintaining cybersecurity in increasingly interconnected systems.

Why it matters

The identification of these vulnerabilities by CISA highlights the ongoing risks associated with software used in critical infrastructure. Active exploitation of these flaws can lead to significant security breaches, potentially impacting organizations that rely on these systems. Awareness of such vulnerabilities is crucial for organizations to take preventive measures and protect sensitive data.

Implications

If exploited, these vulnerabilities could lead to unauthorized access to sensitive data and disruption of services for affected organizations. Companies using these platforms may face reputational damage and financial losses due to breaches. Additionally, the situation underscores the need for robust cybersecurity measures across all sectors, particularly those involved in critical infrastructure.

What to watch

Organizations using Collabora Online and Arista VeloCloud should prioritize patching these vulnerabilities to prevent exploitation. CISA may provide further guidance or updates on mitigation strategies as the situation evolves. Monitoring security advisories and implementing best practices will be essential for minimizing risks in the near term.