Security Signal

Cyber news feed

Cybersecurity news from official agencies, vendors and the security press, merged into stories and scored by how well each is confirmed.

Filtered byDate: 30d Confidence: Confirmed Vendor: SonicWall Clear all filters

Threat dashboard (filtered)

Threat levelGuarded2 stories about actively exploited flaws in the last 7 days

3stories, 30 days 2exploited 0breaches & ransomware 0affect everyday life 8new KEV entries

Key insights

2 stories this week, no data for the previous week yet.
1 involve vulnerabilities exploited in the wild, no data for the previous week yet.
0 breaches or ransomware attacks reported, no data for the previous week yet.
Most reported vendor this week: SonicWall (3 stories).
CISA added 15 exploited vulnerabilities in 30 days; 0 (0%) are known to be used by ransomware groups.
Most covered story this week (16 sources): PHP2Shell: What to know about two critical PHP flaws.

Daily activity, last 14 days

2 stories · busiest Tue 10 (1)

Wed
28 Thu
29 Fri
30 Sat
31 Sun
1 Mon
2 Tue
3 Wed
4 Thu
5 Fri
6 1Sat
7 Sun
8 Mon
9 1Tue
10

Exploited Breach / ransomware Other · click a day to filter

Most reported vendors

Vulnerabilities to watch

CVE-2026-109618PHP Group PHP · EPSS 100%
CVE-2026-109619PHP Group PHP · EPSS 100%
CVE-2026-111497Google Brotli · EPSS 83%
CVE-2026-97229GitLab Community Edition and Enterprise Edition · EPSS 65%
CVE-2026-48356Adobe Commerce and Magento · EPSS 47%
CVE-2026-46300Linux Kernel · EPSS 16%

New exploited flaws by vendor (CISA KEV)

Topics

Source mix

Confidence

Confirmed3

Last 30 days. Click any item to filter the news feed. Tags are added automatically and may be incomplete.

↑

Confirmed 100Vulnerability
Published 10 Nov 2026, 09:16 UTC

Multiple Vulnerabilities in SonicWall SonicOS Could Allow for Authentication Bypass

Source: MS-ISAC Advisories

Vendor SonicWall
Confirmed 100ExploitedPatch available
Published 23 Oct 2026, 12:00 UTCUpdated yesterday

PHP2Shell: What to know about two critical PHP flaws

2 sources: CISA Known Exploited Vulnerabilities, ESET WeLiveSecurity

Vendor Adobe Vendor Apple Vendor Arista Vendor Broadcom Vendor GPUStack Vendor GitLab Vendor Google Vendor Ivanti
CVE-2026-114625 CVE-2026-109618 CVE-2026-109619 CVE-2026-48356 CVE-2026-111497 CVE-2026-41709+9 more
Confirmed 90ExploitedNo fix known yet
Published 7 Nov 2026, 10:16 UTCUpdated yesterday

SonicWall Patches Exploited SonicOS Vulnerability That Weakens VPN Logins

3 sources: SecurityWeek, The Hacker News, Help Net Security

Vendor SonicWall
CVE-2026-19868