Security Signal

Cyber news feed

Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.

Filtered byDay: 2026-10-23 Confidence: Confirmed Source type: Official Clear all filters
↑
  1. Confirmed 100Exploited
    Published 23 Oct 2026, 12:00 UTCUpdated yesterday

    PHP2Shell: What to know about two critical PHP flaws

    2 sources: CISA Known Exploited Vulnerabilities, ESET WeLiveSecurity
    Vendor AdobeVendor AppleVendor AristaVendor BroadcomVendor GitLabVendor GoogleVendor IvantiVendor Linux
    CVE-2026-114625CVE-2026-109618CVE-2026-109619CVE-2026-48356CVE-2026-111497CVE-2026-41709+6 more
  2. Confirmed 100Vulnerability
    Published 23 Oct 2026, 19:09 UTC

    CVE-2026-115845 - Incomplete validation in the run_script Python sandbox in AWS MCP Server

    Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-115845
  3. Confirmed 100Vulnerability
    Published 23 Oct 2026, 17:47 UTC

    CVE-2026-115812 and CVE-2026-115813: Issue in Amazon Web Services Multi Model Server

    Source: AWS Security Bulletins
    CVE-2026-115812CVE-2026-115813
  4. Confirmed 100Exploited
    Published 23 Oct 2026, 12:00 UTC

    CVE-2026-110447 (Collabora Collabora Online – Built-in CODE Server) added to CISA Known Exploited Vulnerabilities

    Source: CISA Known Exploited Vulnerabilities
    Vendor Collabora
    CVE-2026-110447