LatestCovered by 2 sources — first reported by CISA Advisories, Oct 23, 12:00 UTCCISA Adds One Known Exploited Vulnerability to CatalogSecurityTabs reportupdated just nowCISA says attackers are exploiting a critical flaw in Collabora Online's built-in serverCoverageOct 23, 12:00 UTCCISA AdvisoriesCISA Adds One Known Exploited Vulnerability to CatalogOct 24, 08:30 UTCSecurity AffairsU.S. CISA adds Arista VeloCloud Orchestrator flaw to its Known Exploited Vulnerabilities catalogOct 24, 16:53 UTCSecurity AffairsU.S. CISA adds Collabora Online flaw to its Known Exploited Vulnerabilities catalogVulnerabilities in this storyCVE-2026-114625Critical 9.4Known exploitedEPSS 1.0%CVE-2026-110447Critical 9.2Known exploitedEPSS 12.3%