CISA has added critical vulnerabilities in Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrator to its Known Exploited Vulnerabilities catalogue following evidence of active exploitation.
Arista has released urgent security updates for its on-premises VeloCloud Orchestrator to address a critical zero-day vulnerability currently being exploited by remote attackers.
Attackers are actively exploiting a critical CVSS 10.0 flaw in Arista's on-premises VeloCloud Orchestrator, potentially compromising SD-WAN edge devices.
