Security Signal

Cyber news feed

Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.

Filtered byTopic: Vulnerability Source type: Official Clear all filters
↑
  1. Confirmed 100Vulnerability
    Published 30 Oct 2026, 17:39 UTC

    CVE-2026-119086 - Missing type validation in xQueueSelectFromSet in FreeRTOS-Kernel

    Source: AWS Security Bulletins
    CVE-2026-119086
  2. Confirmed 100Vulnerability
    Published 30 Oct 2026, 16:34 UTC

    CVE-2026-119116 and CVE-2026-119148 - Issues in AWS Nitro Enclaves SDK for C

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-119116CVE-2026-119148
  3. Confirmed 100Vulnerability
    Published 30 Oct 2026, 02:01 UTC

    A Vulnerability in Cisco Secure Firewall ASA and FTD Could Allow for Denial of Service

    Source: MS-ISAC Advisories
    Vendor Cisco
  4. Confirmed 100Vulnerability
    Published 28 Oct 2026, 01:14 UTCUpdated 6 days ago

    A Vulnerability in Brotli Library Could Allow for Remote Code Execution

    Source: MS-ISAC Advisories
    Vendor GitLab
  5. Confirmed 100Vulnerability
    Published 29 Oct 2026, 21:22 UTC

    Cisco Finesse Server-Side Request Forgery Vulnerability

    Source: Cisco Security Advisories
    Vendor Cisco
  6. Confirmed 100Vulnerability
    Published 29 Oct 2026, 16:58 UTC

    CVE-2026-119115 - Incorrect authorization in issuer resolution in AWS Private CA Connector for Kubernetes

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-119115
  7. Confirmed 100Vulnerability
    Published 28 Oct 2026, 21:54 UTC

    Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

    Source: Cisco Security Advisories
    Vendor Cisco
  8. Confirmed 100Vulnerability
    Published 28 Oct 2026, 19:39 UTC

    CVE-2026-115415 - Secret masking bypass in the environment tool in Strands Agents Tools

    Source: AWS Security Bulletins
    CVE-2026-115415
  9. Confirmed 100Vulnerability
    Published 28 Oct 2026, 19:15 UTC

    Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability

    Source: Cisco Security Advisories
    Vendor Cisco
  10. Confirmed 100Vulnerability
    Published 28 Oct 2026, 15:40 UTC

    CVE-2026-118029 - Unverified ownership of the default Athena query result location in AWS SDK for pandas

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-118029
  11. Confirmed 100Vulnerability
    Published 27 Oct 2026, 14:41 UTCUpdated 8 days ago

    Multiple Vulnerabilities in Apple Products Could Allow for Arbitrary Code Execution

    Source: MS-ISAC Advisories
    Impact Everyday lifeVendor AppleVendor Google
  12. Confirmed 100Vulnerability
    Published 26 Oct 2026, 16:50 UTC

    CVE-2026-115418 - SQL injection in the database-query custom resource handlers in Amazon Web Services (AWS)

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-115418
  13. Confirmed 100Vulnerability
    Published 25 Oct 2026, 03:11 UTC

    CVE-2026-111943: eMudhra intermediate CA key recovery in AWS trust bundles

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-111943
  14. Confirmed 100Vulnerability
    Published 23 Oct 2026, 19:09 UTC

    CVE-2026-115845 - Incomplete validation in the run_script Python sandbox in AWS MCP Server

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-115845
  15. Confirmed 100Vulnerability
    Published 23 Oct 2026, 17:47 UTC

    CVE-2026-115812 and CVE-2026-115813: Issue in Amazon Web Services Multi Model Server

    Source: AWS Security Bulletins
    CVE-2026-115812CVE-2026-115813
  16. Confirmed 100Vulnerability
    Published 22 Oct 2026, 20:40 UTC

    CVE-2026-115417 - Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in aws-c-mqtt

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-115417
  17. Confirmed 100Vulnerability
    Published 22 Oct 2026, 20:07 UTC

    CVE-2026-115419 - Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Server

    Source: AWS Security Bulletins
    CVE-2026-115419
  18. Confirmed 100Vulnerability
    Published 22 Oct 2026, 19:03 UTCUpdated 14 days ago

    Multiple Cisco Products Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability

    Source: Cisco Security Advisories
    Vendor Cisco
  19. Confirmed 100Vulnerability
    Published 22 Oct 2026, 19:03 UTC

    Multiple Cisco Products Snort 3 Security Hardening Release: October 2026

    Source: Cisco Security Advisories
    Vendor Cisco
    CVE-2026-20043
  20. Confirmed 100Vulnerability
    Published 22 Oct 2026, 18:56 UTC

    CVE-2026-115414 - OS Command Injection Issue in SAM CLI Terraform Hook

    Source: AWS Security Bulletins
    CVE-2026-115414
  21. Confirmed 100Vulnerability
    Published 22 Oct 2026, 16:58 UTC

    CVE-2026-115416 - Incorrect authorization checks in Amazon Athena engine version 3 query processing

    Source: AWS Security Bulletins
    CVE-2026-115416
← Newer