CISA KEV · Arista · Collabora · VeloCloud · Nextcloud · Active Exploitation
Arista VeloCloud and Collabora Online: Two CVEs Added to CISA KEV on October 23, 2026
Two critical flaws joined CISA KEV on Oct 23, both due Oct 26. One turns any VeloCloud Orchestrator user into a superuser operator. The other allows unauthenticated command execution on Nextcloud servers.