CISA flags exploited Collabora and Arista VCO flaws

· Cybersecurity · United States

The U.S. Cybersecurity and Infrastructure Security Agency added two critical vulnerabilities to its Known Exploited Vulnerabilities catalog, citing active exploitation in the wild: one in Collabora Online's Built-in CODE Server and one in Arista's VeloCloud Orchestrator. SecurityWeek reported that the VCO issue is a critical SQL injection flaw that lets attackers reach privileged internal functionality and gain operator privileges, and that it is the third Arista VCO zero-day exploited in four months. Inclusion in the KEV catalog signals confirmed attacks rather than theoretical risk, and it obliges U.S. federal agencies to patch on a set deadline. Administrators running either product should treat remediation as urgent.

Why it matters：Repeated zero-day exploitation of the same product family shows attackers are systematically targeting network orchestration layers, while KEV listing raises the compliance stakes for federal and enterprise defenders.

Key points

  • The VCO flaw is a critical SQL injection granting operator privileges.
  • It is the third Arista VCO zero-day exploited in four months.
  • KEV listing obliges U.S. federal agencies to patch by a set deadline.

Sources (original reporting)

More stories from this day