Security Signal

Cyber news feed

Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.

Filtered byDate: 30d Topic: Vulnerability Source type: Official Clear all filters
↑
  1. Confirmed 100Vulnerability
    Published 3 Nov 2026, 17:05 UTCUpdated 7 h ago

    Cisco Secure Email Gateway SQL Injection Vulnerability

    2 sources: Cisco Security Advisories, CERT-EU Advisories
    Impact Everyday lifeVendor Cisco
  2. Confirmed 100Vulnerability
    Published 5 Nov 2026, 00:15 UTC

    2026-018: Critical Vulnerabilities in PHP

    Source: CERT-EU Advisories
  3. Confirmed 100Vulnerability
    Published 5 Nov 2026, 00:15 UTC

    2026-019: Critical Vulnerability in GitLab Community and Enterprise Editions

    Source: CERT-EU Advisories
    Vendor GitLab
  4. Confirmed 100Vulnerability
    Published 5 Nov 2026, 00:15 UTC

    2026-016: Critical Vulnerability in GitLab CE and EE

    Source: CERT-EU Advisories
    Vendor GitLab
  5. Confirmed 100Vulnerability
    Published 5 Nov 2026, 00:15 UTC

    2026-015: Critical Vulnerability in Multiple Atlassian Products

    Source: CERT-EU Advisories
    Vendor Atlassian
  6. Confirmed 100Vulnerability
    Published 5 Nov 2026, 00:15 UTC

    2026-014: Critical Vulnerabilities in Citrix NetScaler ADC and Gateway

    Source: CERT-EU Advisories
    Impact Everyday lifeVendor Citrix
  7. Confirmed 100Vulnerability
    Published 5 Nov 2026, 00:15 UTC

    2026-013: Critical Vulnerability in F5 BIG-IP APM

    Source: CERT-EU Advisories
    Vendor F5
  8. Confirmed 100Vulnerability
    Published 5 Nov 2026, 00:15 UTC

    2026-012: Critical Vulnerabilities in Check Point Products

    Source: CERT-EU Advisories
    Vendor Check Point
  9. Confirmed 100Vulnerability
    Published 5 Nov 2026, 00:15 UTC

    2026-011: Critical Vulnerabilities in SAP Kernel and NetWeaver Message Server

    Source: CERT-EU Advisories
    Vendor SAP
    CVE-2026-44756CVE-2026-58240
  10. Confirmed 100Vulnerability
    Published 4 Nov 2026, 19:40 UTCUpdated 10 h ago

    CVE-2026-122192 - Guest Access to Firecracker Process Memory After a Failed Memory Discard

    2 sources: AWS Security Bulletins, r/netsec
    Vendor AWS
    CVE-2026-122192
  11. Confirmed 100Vulnerability
    Published 4 Nov 2026, 21:44 UTC

    Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities

    Source: Cisco Security Advisories
    Vendor Cisco
  12. Confirmed 100Vulnerability
    Published 4 Nov 2026, 19:56 UTC

    Cisco Identity Services Engine Authorization Bypass Vulnerability

    Source: Cisco Security Advisories
    Vendor Cisco
  13. Confirmed 100Vulnerability
    Published 4 Nov 2026, 16:01 UTC

    Cisco Advance Notification for Publication of November 4, 2026, Security Advisories

    Source: Cisco Security Advisories
    Impact Everyday lifeVendor Cisco
    CVE-2026-76506CVE-2026-76419CVE-2026-20241
  14. Confirmed 100Vulnerability
    Published 4 Nov 2026, 16:00 UTC

    Cisco Unified Communications Manager Cross-Site Scripting Vulnerability

    Source: Cisco Security Advisories
    Vendor Cisco
  15. Confirmed 100Vulnerability
    Published 4 Nov 2026, 16:00 UTC

    Cisco UCS Central Software Remote Code Execution Vulnerability

    Source: Cisco Security Advisories
    Vendor Cisco
  16. Confirmed 100Vulnerability
    Published 3 Nov 2026, 21:32 UTC

    CVE-2026-119084 - Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Connection Parameters

    Source: AWS Security Bulletins
    CVE-2026-119084
  17. Confirmed 100Vulnerability
    Published 3 Nov 2026, 18:58 UTC

    CVE-2026-115413 - AWS API MCP Server OAuth token audience validation bypass

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-115413
  18. Confirmed 100Vulnerability
    Published 3 Nov 2026, 18:54 UTC

    CVE-2026-121652 - Stored cross-site scripting (XSS) in AWS Amplify maplibre-gl-js-amplify popup rendering

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-121652
  19. Confirmed 100Vulnerability
    Published 3 Nov 2026, 18:26 UTC

    CVE-2026-119922 - Babelfish for PostgreSQL Privilege Escalation

    Source: AWS Security Bulletins
    CVE-2026-119922
  20. Confirmed 100Vulnerability
    Published 31 Oct 2026, 05:21 UTCUpdated 2 days ago

    Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing

    3 sources: AWS Security Bulletins, Fortinet PSIRT, The Hacker News
    Impact Everyday lifeVendor Linux
    CVE-2026-98432
  21. Confirmed 100Vulnerability
    Published 2 Nov 2026, 21:43 UTC

    CVE-2026-116635 - Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-116635
  22. Confirmed 100Vulnerability
    Published 2 Nov 2026, 21:40 UTC

    CVE-2026-105811 - Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-105811
  23. Confirmed 100Vulnerability
    Published 2 Nov 2026, 19:19 UTC

    CVE-2026-120497 - Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-120497
  24. Confirmed 100Vulnerability
    Published 2 Nov 2026, 16:40 UTC

    CVE-2026-119301 - Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas

    Source: AWS Security Bulletins
    Impact Everyday lifeVendor AWSVendor Apache
    CVE-2026-119301
  25. Confirmed 100Vulnerability
    Published 30 Oct 2026, 18:18 UTC

    CVE-2026-119117 - Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java

    Source: AWS Security Bulletins
    CVE-2026-119117
Older →