Security Signal

Cyber news feed

Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.

Filtered byDay: 2026-11-02 Unverified shown Topic: Vulnerability Clear all filters
↑
  1. Confirmed 100Vulnerability
    Published 2 Nov 2026, 21:43 UTC

    CVE-2026-116635 - Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-116635
  2. Confirmed 100Vulnerability
    Published 2 Nov 2026, 21:40 UTC

    CVE-2026-105811 - Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-105811
  3. Reported 60Vulnerability
    Published 2 Nov 2026, 20:20 UTC

    What exploited vulnerabilities have in common: A data-driven analysis of real-world attacks

    Source: Microsoft Security Blog
  4. Confirmed 100Vulnerability
    Published 2 Nov 2026, 19:19 UTC

    CVE-2026-120497 - Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-120497
  5. Confirmed 100Vulnerability
    Published 2 Nov 2026, 16:40 UTC

    CVE-2026-119301 - Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas

    Source: AWS Security Bulletins
    Impact Everyday lifeVendor AWSVendor Apache
    CVE-2026-119301
  6. Reported 70Vulnerability
    Published 2 Nov 2026, 11:50 UTC

    Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers

    Source: The Hacker News
  7. Reported 70Vulnerability
    Published 2 Nov 2026, 11:30 UTC

    Is Your SOC Ready for AI Agents? A Maturity Check Before You Deploy

    Source: The Hacker News
  8. Unverified 30Vulnerability
    Published 2 Nov 2026, 09:30 UTC

    Remote code execution on Linux systems with multipath TCP

    Source: r/netsec
    Vendor Linux
  9. Unverified 30Vulnerability
    Published 2 Nov 2026, 09:11 UTC

    WordPress pingback and Brotli RCE

    Source: r/netsec
    Vendor WordPress