Security3 hOctober 24, 2026, 13:25

CISA adds two actively exploited critical flaws to KEV catalog

CISA added vulnerabilities in Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrator to its Known Exploited Vulnerabilities catalog. One flaw, CVE-2026-110447, carries a CVSS score of 9.2, and both are being exploited in the wild.

The Hacker News

Open source

CISA adds two actively exploited critical flaws to KEV catalog

CVE-2026-110447 in Collabora Online rated CVSS 9.2
Second flaw affects Arista VeloCloud Orchestrator
CISA cites active exploitation in the wild
Both vulnerabilities added to the KEV catalog

#CISA#Collabora#Arista

CISA adds critical Kestra CVE-2026-49869 to KEV catalog

Security

Check Point and F5 patch actively exploited vulnerabilities

Security

CISA adds five legacy flaws to KEV catalog with 11 October deadline

Security

CISA adds two actively exploited critical flaws to KEV catalog

CISA adds critical Kestra CVE-2026-49869 to KEV catalog

Check Point and F5 patch actively exploited vulnerabilities

CISA adds five legacy flaws to KEV catalog with 11 October deadline

CISA adds Microsoft SharePoint and MikroTik RouterOS flaws to KEV catalog