Security Signal

Cyber news feed

Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.

Filtered byDate: 30d Topic: Vulnerability Confidence: Confirmed Clear all filters
↑
  1. Confirmed 100Vulnerability
    Published 6 Nov 2026, 18:46 UTC

    CVE-2026-119923 and CVE-2026-119924: Issues with Babelfish for Aurora PostgreSQL

    Source: AWS Security Bulletins
    CVE-2026-119923CVE-2026-119924
  2. Confirmed 100Vulnerability
    Published 6 Nov 2026, 17:19 UTC

    CVE-2026-122193 - Issue with Trusted Remote Execution Setup Guide - OS command injection in the example SSM documents in Trusted Remote Execution (REX)

    Source: AWS Security Bulletins
    CVE-2026-122193
  3. Confirmed 100Vulnerability
    Published 5 Nov 2026, 16:43 UTC

    CVE-2026-119083 - GluonTS arbitrary file write during archive extraction

    Source: AWS Security Bulletins
    CVE-2026-119083
  4. Confirmed 100Vulnerability
    Published 5 Nov 2026, 00:15 UTC

    2026-011: Critical Vulnerabilities in SAP Kernel and NetWeaver Message Server

    Source: CERT-EU Advisories
    Vendor SAP
    CVE-2026-44756CVE-2026-58240
  5. Confirmed 100Vulnerability
    Published 5 Nov 2026, 00:15 UTC

    2026-012: Critical Vulnerabilities in Check Point Products

    Source: CERT-EU Advisories
    Vendor Check Point
  6. Confirmed 100Vulnerability
    Published 5 Nov 2026, 00:15 UTC

    2026-013: Critical Vulnerability in F5 BIG-IP APM

    Source: CERT-EU Advisories
    Vendor F5
  7. Confirmed 100Vulnerability
    Published 5 Nov 2026, 00:15 UTC

    2026-014: Critical Vulnerabilities in Citrix NetScaler ADC and Gateway

    Source: CERT-EU Advisories
    Impact Everyday lifeVendor Citrix
  8. Confirmed 100Vulnerability
    Published 5 Nov 2026, 00:15 UTC

    2026-015: Critical Vulnerability in Multiple Atlassian Products

    Source: CERT-EU Advisories
    Vendor Atlassian
  9. Confirmed 100Vulnerability
    Published 5 Nov 2026, 00:15 UTC

    2026-016: Critical Vulnerability in GitLab CE and EE

    Source: CERT-EU Advisories
    Vendor GitLab
  10. Confirmed 100Vulnerability
    Published 5 Nov 2026, 00:15 UTC

    2026-019: Critical Vulnerability in GitLab Community and Enterprise Editions

    Source: CERT-EU Advisories
    Vendor GitLab
  11. Confirmed 100Vulnerability
    Published 5 Nov 2026, 00:15 UTC

    2026-018: Critical Vulnerabilities in PHP

    Source: CERT-EU Advisories
  12. Confirmed 100Vulnerability
    Published 3 Nov 2026, 17:05 UTCUpdated 2 days ago

    Cisco Secure Email Gateway SQL Injection Vulnerability

    2 sources: Cisco Security Advisories, CERT-EU Advisories
    Impact Everyday lifeVendor Cisco
  13. Confirmed 100Vulnerability
    Published 4 Nov 2026, 19:40 UTCUpdated 2 days ago

    CVE-2026-122192 - Guest Access to Firecracker Process Memory After a Failed Memory Discard

    2 sources: AWS Security Bulletins, r/netsec
    Vendor AWS
    CVE-2026-122192
  14. Confirmed 100Vulnerability
    Published 4 Nov 2026, 21:44 UTC

    Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities

    Source: Cisco Security Advisories
    Vendor Cisco
  15. Confirmed 100Vulnerability
    Published 4 Nov 2026, 19:56 UTC

    Cisco Identity Services Engine Authorization Bypass Vulnerability

    Source: Cisco Security Advisories
    Vendor Cisco
  16. Confirmed 100Vulnerability
    Published 4 Nov 2026, 16:01 UTC

    Cisco Advance Notification for Publication of November 4, 2026, Security Advisories

    Source: Cisco Security Advisories
    Impact Everyday lifeVendor Cisco
    CVE-2026-76506CVE-2026-76419CVE-2026-20241
  17. Confirmed 100Vulnerability
    Published 4 Nov 2026, 16:00 UTC

    Cisco UCS Central Software Remote Code Execution Vulnerability

    Source: Cisco Security Advisories
    Vendor Cisco
  18. Confirmed 100Vulnerability
    Published 4 Nov 2026, 16:00 UTC

    Cisco Unified Communications Manager Cross-Site Scripting Vulnerability

    Source: Cisco Security Advisories
    Vendor Cisco
  19. Confirmed 100Vulnerability
    Published 3 Nov 2026, 21:32 UTC

    CVE-2026-119084 - Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Connection Parameters

    Source: AWS Security Bulletins
    CVE-2026-119084
  20. Confirmed 100Vulnerability
    Published 3 Nov 2026, 18:58 UTC

    CVE-2026-115413 - AWS API MCP Server OAuth token audience validation bypass

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-115413
  21. Confirmed 100Vulnerability
    Published 3 Nov 2026, 18:54 UTC

    CVE-2026-121652 - Stored cross-site scripting (XSS) in AWS Amplify maplibre-gl-js-amplify popup rendering

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-121652
  22. Confirmed 100Vulnerability
    Published 3 Nov 2026, 18:26 UTC

    CVE-2026-119922 - Babelfish for PostgreSQL Privilege Escalation

    Source: AWS Security Bulletins
    CVE-2026-119922
  23. Confirmed 100Vulnerability
    Published 3 Nov 2026, 12:00 UTC

    Subnet Solutions PowerSYSTEM Center

    Source: CISA Advisories
  24. Confirmed 100Vulnerability
    Published 31 Oct 2026, 05:21 UTCUpdated 3 days ago

    Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing

    3 sources: AWS Security Bulletins, Fortinet PSIRT, The Hacker News
    Impact Everyday lifeVendor Linux
    CVE-2026-98432
  25. Confirmed 100Vulnerability
    Published 2 Nov 2026, 21:43 UTC

    CVE-2026-116635 - Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-116635
Older →