Today, attackers are targeting vulnerabilities in network management and document collaboration software. Small businesses using these products should review their security to protect against potential attacks.
Arista VeloCloud Orchestrator (CVE-2026-114625)
Arista VeloCloud Orchestrator is a network management tool. Attackers could exploit this to gain access to internal systems and data, compromising the confidentiality and integrity of the network. Businesses should update to the latest version and monitor their network for any unauthorized access.
What to do: Install the maker's update now. If there is no update yet, follow the maker's own steps to reduce the risk, and stop using the product until it is fixed if neither is available.
Collabora Collabora Online – Built-in CODE Server (CVE-2026-110447)
Collabora Online is a document collaboration tool. Attackers could use this to execute arbitrary code, potentially gaining full control of the system. Businesses should ensure the CODE server is secure and consider using a different solution if possible.
What to do: Install the maker's update now. If there is no update yet, follow the maker's own steps to reduce the risk, and stop using the product until it is fixed if neither is available.
Tip of the day: Remove software you do not use
Every program is something else to keep updated. Uninstall what you no longer need, especially old browser extensions.
Doing it once, properly
The lowest quote rarely stays the lowest. Work that skips the security basics tends to be redone from scratch later, and redoing it costs more than doing it properly once.
Sources
- CISA Known Exploited Vulnerabilities catalogue
- CVE-2026-114625 on the National Vulnerability Database
- CVE-2026-110447 on the National Vulnerability Database
Written each morning from CISA's catalogue of vulnerabilities known to be exploited, with the help of an AI model that runs on our own server. Check the sources before acting, and talk to us if you are not sure whether you are affected.