CISA adds two critical flaws under active attack to its KEV catalog: Collabora CODE Server in Nextcloud and Arista VeloCloud Orchestrator.
On Friday, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added two critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. The KEV catalog is CISA's public list of flaws that attackers are confirmed to be using in real attacks. The first, CVE-2026-110447, is in the Collabora Online Built-in CODE Server, an app that adds document editing to Nextcloud file-sharing servers. The second, CVE-2026-114625, affects on-premise installations of Arista VeloCloud Orchestrator (VCO), a tool used to manage networks. CISA based the additions on reports of active exploitation, and it has set a patch deadline for U.S. federal civilian agencies.
Both flaws were patched by their vendors before CISA acted. Attackers were already exploiting them by then.
The VeloCloud bug is the third flaw in the same Arista product to be exploited in the wild since July 2026. The two earlier ones were CVE-2026-16812 and CVE-2026-93952, and both carried the maximum CVSS score of 10.0.
This flaw affects the Collabora Online Built-in CODE Server, also known by its app name richdocumentscode, in versions before 26.4.303. It is a Nextcloud app that runs a document server locally, so users can edit office files inside Nextcloud without setting up a separate server.
The verified CVE data narrows the scope. Standalone Collabora Online servers are not vulnerable. Only Nextcloud setups that use the built-in CODE Server are affected. The database also says this bug is different from an earlier one, CVE-2025-66208. Admins who patched that older issue should not assume they are covered.
This flaw affects on-premise versions of Arista VeloCloud Orchestrator. Organisations use the Orchestrator to centrally configure and manage their VeloCloud networking equipment. The fixes were released in versions 5.2.3.18, 6.1.3.10 and 6.4.2.12. Admins running earlier builds in those release lines should treat their systems as exposed. The sources do not say whether cloud-hosted VCO instances are affected. They do not name targeted sectors or say how many organisations were hit.
CVE-2026-110447 is an operating system command injection (classified as CWE-78). Some programs pass text along to the server's operating system as part of a command. If that text is not filtered properly, an attacker can slip in extra instructions, and the server will run them as if they were legitimate.
Here the weak spot is a file called proxy.php. The bug can only be triggered when the local CODE document server isn't running. The CVE data gives one example of when that happens: shortly after the product has been restarted. In that window, a remote attacker can get the server to run commands of their choosing. This is known as remote code execution, meaning the attacker controls the machine from afar. That level of access is enough to install a web shell, which is what investigators found.
CVE-2026-114625 is an SQL injection vulnerability. SQL is the language applications use to talk to their databases. In an SQL injection, crafted input changes the database query the application sends. Here, that lets a remote attacker reach privileged internal functions they should not be able to use.
There is an important limit. The attacker needs network access to the VCO web interface and a valid logged-in session on the VCO portal. However, the lowest user role that works is Enterprise Read Only, which is meant to be a view-only account. So an attacker who steals a low-level login, or a malicious insider, could use it to gain much more power.
Both flaws are rated critical:
CVSS (Common Vulnerability Scoring System) rates flaws from 0 to 10, and anything from 9.0 up counts as critical. Neither score is theoretical, because both bugs are being used in real attacks. The verified database and the outlet agree on the Collabora flaw's score, its weakness type and its exploitation status.
The Collabora bug is especially dangerous because the outlet's description of it lists no login requirement. Attackers are also using it to steal secrets such as passwords and crypto wallets. The VeloCloud flaw needs an account, but a read-only one is enough. It is also the third exploited bug in this product in a few months, which suggests attackers are paying close attention to VCO.
richdocumentscode) on Nextcloud to version 26.4.303 or later.ITVedas analysis: These flaws hit tools that small teams often install and then forget: a document add-on that runs quietly inside Nextcloud, and a management console that hands out view-only accounts freely. A third exploited VeloCloud bug since July is a strong reason to keep management interfaces off the open internet and patch quickly.
Want to understand the technology behind this story? ITVedas has beginner-friendly guides on every IT topic.
Explore IT Chapters →