The Hacker News · 10/24/2026

CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud

CVE-2026-110447 (CVSS 9.2) in Arista VeloCloud Orchestrator: Critical RCE. VeloCloud widely used in SD-WAN deployments for industrial and OT networks.

Read original coverage