Security Signal

Cyber news feed: exploited in the wild

Stories about vulnerabilities attackers are using now, including new entries in CISA’s Known Exploited Vulnerabilities catalogue.

Filtered byExploited Date: 30d Unverified shown Clear all filters
↑
  1. Confirmed 100Exploited
    Published 4 Nov 2026, 18:52 UTC

    Vulnerabilities in Node.js and Brotli Affecting Cisco Products: October 2026

    Source: Cisco Security Advisories
    Vendor CiscoVendor Google
    CVE-2026-111497
  2. Confirmed 100Exploited
    Published 23 Oct 2026, 12:00 UTCUpdated 16 h ago

    PHP2Shell: What to know about two critical PHP flaws

    2 sources: CISA Known Exploited Vulnerabilities, ESET WeLiveSecurity
    Vendor AdobeVendor AppleVendor AristaVendor BroadcomVendor GitLabVendor GoogleVendor IvantiVendor Linux
    CVE-2026-114625CVE-2026-109618CVE-2026-109619CVE-2026-48356CVE-2026-111497CVE-2026-41709+6 more
  3. Reported 80Exploited
    Published 4 Nov 2026, 05:43 UTC

    CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades

    Source: The Hacker News
    Vendor WordPress
    CVE-2026-119977
  4. Reported 80Exploited
    Published 31 Oct 2026, 08:27 UTC

    Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access

    Source: The Hacker News
    Vendor Ivanti
    CVE-2026-111357
  5. Confirmed 100Exploited
    Published 28 Oct 2026, 21:58 UTCUpdated 5 days ago

    CVE-2026-111497: Native Brotli Decoder Remote Code Execution and Memory Disclosure

    2 sources: AWS Security Bulletins, Palo Alto Networks Security Advisories
    Vendor GoogleVendor Palo Alto Networks
    CVE-2026-111497
  6. Confirmed 100Exploited
    Published 29 Oct 2026, 18:00 UTCUpdated 5 days ago

    CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: CRITICAL)

    3 sources: Unit 42, Palo Alto Networks Security Advisories, Cisco Security Advisories
    Vendor CiscoVendor PHP GroupVendor Palo Alto Networks
    CVE-2026-109618CVE-2026-109619
  7. Reported 70Actively exploited
    Published 30 Oct 2026, 07:45 UTC

    Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw

    Source: The Hacker News
    Impact Everyday life
    CVE-2026-118539
  8. Reported 80Exploited
    Published 30 Oct 2026, 07:27 UTC

    CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV

    Source: The Hacker News
    Vendor CiscoVendor GitLab
    CVE-2026-97229
  9. Confirmed 100Exploited
    Published 29 Oct 2026, 12:00 UTC

    CVE-2026-76418 (Cisco Secure Firewall ASA Software and Cisco Secure FTD Software) added to CISA Known Exploited Vulnerabilities

    Source: CISA Known Exploited Vulnerabilities
    Vendor Cisco
    CVE-2026-76418
  10. Reported 70Exploited
    Published 28 Oct 2026, 21:32 UTC

    Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WAN

    Source: Cisco Talos
    Vendor Cisco
    CVE-2026-20127
  11. Reported 70Actively exploited
    Published 28 Oct 2026, 19:56 UTC

    Oracle celebrates end of Cybersecurity Awareness Month with quadruple trouble

    Source: The Register (Security)
    Vendor Oracle
  12. Confirmed 100Actively exploited
    Published 27 Oct 2026, 14:45 UTCUpdated 9 days ago

    Cisco Expressway Series Security Hardening Release: October 2026

    Source: Cisco Security Advisories
    Impact Everyday lifeVendor Cisco
  13. Confirmed 100Exploited
    Published 26 Oct 2026, 07:00 UTC

    Node2Shell CVEs

    Source: Fortinet PSIRT
    Vendor Google
    CVE-2026-111497CVE-2026-105482CVE-2026-105483CVE-2026-106069CVE-2026-105481CVE-2026-106072
  14. Confirmed 100Exploited
    Published 23 Oct 2026, 12:00 UTC

    CVE-2026-110447 (Collabora Collabora Online – Built-in CODE Server) added to CISA Known Exploited Vulnerabilities

    Source: CISA Known Exploited Vulnerabilities
    Vendor Collabora
    CVE-2026-110447