Ruth CallowayOn assignment
Not verified yet. Ruth Calloway is reporting this story for the newsroom. Until then, this is gathered automatically from the outlets below.
CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-110447 Collabora Online – Built-in CODE Server OS Command…
Ruth Calloway is reporting this story
- New headline Was: “Arista says VeloCloud SQL injection is under active attack”
- Our desk updated its story
- CISA Advisories is now reporting this
- New headline Was: “Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks”
- Our desk filed its story
How it’s being reported
2 sourcesFirst reported by 
CISA Advisories
CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud
Gives this outlet’s account of the story.
Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two vulnerabilities impacting Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrator (VCO) to its…— The Hacker News
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two vulnerabilities impacting Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrator (VCO) to its…
CISA AdvisoriesFirstCISA Adds One Known Exploited Vulnerability to Catalog
Gives this outlet’s account of the story.
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-110447 Collabora Online – Built-in CODE Server OS Command…
Where they agree
- All outlets name "Built".
- All outlets name "CISA".
- All outlets name "CODE".
- All outlets name "Collabora Online".
- All outlets name "Exploited".