2026-10-28 · Vulnerability

Generated 5 Nov 2026, 12:33 UTC · Live view: news.rogelio.cloud/?day=2026-10-28&category=vulnerability

Executive summary

9 stories in the last 30 days; 5 (56%) confirmed by official sources.
No actively exploited vulnerabilities in this selection.
Most common topic: Vulnerability (9).
Most reported vendor: Cisco (3 stories).

Stories

Actively exploited

Breaches & ransomware

Confirmed by official sources

Stories per day

Daily breakdown, last 14 days

Exploited Breach / ransomware Other

Topics

Vulnerability — 9 (100%)

Most reported vendors

Top stories

#	Story	Confidence	Updated
1	A Vulnerability in Brotli Library Could Allow for Remote Code Execution Original article	Confirmed 100 Vulnerability	30 Oct 2026
2	Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability Original article	Confirmed 100 Vulnerability	28 Oct 2026
3	CVE-2026-115415 - Secret masking bypass in the environment tool in Strands Agents Tools Original article	Confirmed 100 Vulnerability	28 Oct 2026
4	Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability Original article	Confirmed 100 Vulnerability	28 Oct 2026
5	CVE-2026-118029 - Unverified ownership of the default Athena query result location in AWS SDK for pandas Original article	Confirmed 100 Vulnerability	28 Oct 2026
6	Most Servers on the Planet Are Vulnerable to This Firmware Code-Execution Flaw Original article	Reported 70 Vulnerability	28 Oct 2026
7	The ‘Vulnpocalypse’ is coming for the internet’s aging code, says Wiz’s CTO Original article	Reported 70 Vulnerability	28 Oct 2026
8	Cisco open sources tool for detecting AI agents on hacking sprees Original article	Reported 70 Vulnerability	28 Oct 2026
9	Chrome and Firefox updates fix serious security flaws. Install now Original article	Reported 60 Vulnerability	28 Oct 2026

Vulnerabilities to watch

CVE	Product	Exploited	CVSS	EPSS
CVE-2026-115415		No	—	0.3%
CVE-2026-118029		No	—	0.2%

Sources: official agencies, vendor security teams and the security press, linked from each story. Confidence scores reflect who reported each story. Tags and summaries are generated automatically and may be incomplete.