Security Signal

Cyber news feed: exploited in the wild

Stories about vulnerabilities attackers are using now, including new entries in CISA’s Known Exploited Vulnerabilities catalogue.

Filtered byExploited Day: 2026-10-23 Unverified shown Clear all filters

Threat dashboard (filtered)

Threat levelGuarded1 story about actively exploited flaws in the last 7 days

3stories, 30 days 3exploited 0breaches & ransomware 0affect everyday life 8new KEV entries

Key insights

0 stories this week, no data for the previous week yet.
0 involve vulnerabilities exploited in the wild, no data for the previous week yet.
0 breaches or ransomware attacks reported, no data for the previous week yet.
Most reported vendor this week: Adobe (1 story).
CISA added 14 exploited vulnerabilities in 30 days; 0 (0%) are known to be used by ransomware groups.
Most covered story this week (14 sources): PHP2Shell: What to know about two critical PHP flaws.

Daily activity, last 14 days

19 stories · busiest Tue 27 (3) · last 7 days ▼ 27% vs the week before

Sun
25 1Mon
26 3Tue
27 2Wed
28 2Thu
29 3Fri
30 Sat
31 Sun
1 Mon
2 1Tue
3 2Wed
4 2Thu
5 3Fri
6 Sat
7

Exploited Breach / ransomware Other · click a day to filter

Most reported vendors

Vulnerabilities to watch

CVE-2026-109618PHP Group PHP · EPSS 100%
CVE-2026-109619PHP Group PHP · EPSS 100%
CVE-2026-111497Google Brotli · EPSS 83%
CVE-2026-110447Collabora Collabora Online – Built-in CODE Server · EPSS 73%
CVE-2026-97229GitLab Community Edition and Enterprise Edition · EPSS 65%
CVE-2026-48356Adobe Commerce and Magento · EPSS 47%

New exploited flaws by vendor (CISA KEV)

Topics

Actively exploited3

Source mix

Official3

Confidence

Confirmed3

Last 30 days. Click any item to filter the news feed. Tags are added automatically and may be incomplete.

↑

Confirmed 100Exploited
Published 23 Oct 2026, 12:00 UTCUpdated 13 h ago

PHP2Shell: What to know about two critical PHP flaws

2 sources: CISA Known Exploited Vulnerabilities, ESET WeLiveSecurity

Vendor Adobe Vendor Apple Vendor Arista Vendor Broadcom Vendor GitLab Vendor Google Vendor Ivanti Vendor Linux
CVE-2026-114625 CVE-2026-109618 CVE-2026-109619 CVE-2026-48356 CVE-2026-111497 CVE-2026-41709+7 more
Confirmed 100Exploited
Published 23 Oct 2026, 12:00 UTCUpdated 12 days ago

CISA Adds One Known Exploited Vulnerability to Catalog

Source: CISA Advisories

CVE-2026-110447 CVE-2026-114625 CVE-2026-109618 CVE-2026-109619
Confirmed 100Exploited
Published 23 Oct 2026, 12:00 UTC

CVE-2026-110447 (Collabora Collabora Online – Built-in CODE Server) added to CISA Known Exploited Vulnerabilities

Source: CISA Known Exploited Vulnerabilities

Vendor Collabora
CVE-2026-110447