CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two critical vulnerabilities in Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrator to its Known Exploited Vulnerabilities catalog, citing active exploitation. The flaws include a remote code execution vulnerability and an SQL injection vulnerability that threaten server security and access control.

This Wire brief sits within Fusion42's coverage of Security Infrastructure, and 2 sources have reported it.