CISA's Latest Alert: Two Critical Flaws Under Active Attack
Emily Davis ·
Listen to this article~3 min
CISA adds two critical vulnerabilities to its Known Exploited Vulnerabilities catalog, with active exploitation reported. Here's what you need to know and do.
You know that feeling when you see a security alert and think, "Not another one"? Yeah, me too. But this time, it's worth pausing. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) just added two critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. And these aren't just theoretical—they're being actively exploited in the wild.
The culprits? Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrator (VCO). Both are widely used in enterprise environments, which makes this a big deal. Let's break it down.
### What Exactly Got Flagged?
CISA added two flaws on Friday, and they're both rated critical. Here's the rundown:
- **CVE-2026-110447** (CVSS score: 9.2) – This one's in Collabora Online's CODE Server. It's an operating system command injection vulnerability that could let an attacker execute arbitrary commands. Think of it as someone sneaking into your kitchen and cooking whatever they want—except the kitchen is your server.
- **The second flaw** (details still emerging) impacts Arista VeloCloud Orchestrator. While the CVSS score isn't public yet, the fact that it's in the KEV catalog means it's serious business.
### Why Should You Care?
If you're running either of these products, you're potentially exposed. And because they're already being exploited, time is of the essence. CISA's KEV catalog isn't just a suggestion—it's a call to action. Federal agencies have a deadline to patch, but honestly, everyone should treat this as urgent.
> "The moment a vulnerability hits the KEV list, it's no longer a 'maybe we'll get to it' situation. It's a 'drop everything and patch' situation." – Emily Davis, Head of Digital Privacy and Antidetect Browser Solutions
### What Should You Do Right Now?
First, don't panic. Panic leads to mistakes. Instead, take these steps:
- **Check your inventory**: Are you using Collabora Online or Arista VeloCloud? If not, you can breathe a little easier. If yes, keep reading.
- **Apply patches immediately**: Both vendors are likely to release fixes. Monitor their advisories and patch as soon as possible.
- **Isolate affected systems**: If you can't patch right away, limit network access to these systems. Every bit helps.
- **Monitor for suspicious activity**: Look for unusual commands or outbound connections. Early detection can make all the difference.
### The Bigger Picture
This isn't just about two vulnerabilities. It's a reminder that the threat landscape is constantly evolving. Attackers are quick to weaponize flaws, and the window between disclosure and exploitation is shrinking.
So, what's the takeaway? Stay vigilant. Keep your systems updated. And maybe set a reminder to check CISA's KEV catalog regularly—it's a goldmine of actionable intel.
Stay safe out there.
