CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud

The Hacker News · Saturday, 24 October 2026 at 06:25 (3h ago) · Original article ↗

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two vulnerabilities impacting Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrator (VCO) to its Known Exploited Vulnerabilities (KEV), citing reports of active exploitation in the wild.

The critical-severity vulnerabilities are listed below -

CVE-2026-110447 (CVSS score: 9.2) - An operating

You're reading a preview. The full article is published by The Hacker News on their website.

Read the full story on The Hacker News

Security

Abandoned Popcorn Time app exposed millions of devices to RCE attacks

Researchers remotely disabled a vulnerable updater in the abandoned Time4Popcorn app, a fork of the Popcorn Time BitTorrent client, closing a security flaw that could have allowed attackers to execute malicious code with elevated privileges on millions of computers. [...]

BleepingComputer 12h ago

Security

Updated Google privacy policy says your Gmail might be used for advertising

Turning on Personal Intelligence gives the company more data for ad targeting.

Ars Technica 13h ago

Security

There's a third PHP2Shell bug, but it won't get an emergency fix

Bad things (and software bugs?) come in threes

The Register 13h ago

CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud

More Security & Privacy

Abandoned Popcorn Time app exposed millions of devices to RCE attacks

Updated Google privacy policy says your Gmail might be used for advertising

There's a third PHP2Shell bug, but it won't get an emergency fix