Security Signal
Threat intelligence report · last 30 days

2026-11-02 · Vulnerability

Generated 5 Nov 2026, 11:55 UTC · Live view: news.rogelio.cloud/?day=2026-11-02&category=vulnerability

Executive summary

  • 7 stories in the last 30 days; 4 (57%) confirmed by official sources.
  • No actively exploited vulnerabilities in this selection.
  • Most common topic: Vulnerability (7).
  • Most reported vendor: AWS (4 stories).
7
Stories
0
Actively exploited
0
Breaches & ransomware
4
Confirmed by official sources

Stories per day

7 10-0710-1210-1710-2210-2711-0111-05

Daily breakdown, last 14 days

2026-10-23: 0 stories (0 exploited, 0 breaches/ransomware) F232026-10-24: 0 stories (0 exploited, 0 breaches/ransomware) S242026-10-25: 0 stories (0 exploited, 0 breaches/ransomware) S252026-10-26: 0 stories (0 exploited, 0 breaches/ransomware) M262026-10-27: 0 stories (0 exploited, 0 breaches/ransomware) T272026-10-28: 0 stories (0 exploited, 0 breaches/ransomware) W282026-10-29: 0 stories (0 exploited, 0 breaches/ransomware) T292026-10-30: 0 stories (0 exploited, 0 breaches/ransomware) F302026-10-31: 0 stories (0 exploited, 0 breaches/ransomware) S312026-11-01: 0 stories (0 exploited, 0 breaches/ransomware) S12026-11-02: 7 stories (0 exploited, 0 breaches/ransomware) M272026-11-03: 0 stories (0 exploited, 0 breaches/ransomware) T32026-11-04: 0 stories (0 exploited, 0 breaches/ransomware) W42026-11-05: 0 stories (0 exploited, 0 breaches/ransomware) T5

Exploited Breach / ransomware Other

Topics

  • Vulnerability — 7 (100%)

Most reported vendors

AWS4Apache1

Top stories

#StoryConfidenceUpdated
1CVE-2026-116635 - Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server
Original article		Confirmed 100
Vulnerability		2 Nov 2026
2CVE-2026-105811 - Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS
Original article		Confirmed 100
Vulnerability		2 Nov 2026
3CVE-2026-120497 - Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows
Original article		Confirmed 100
Vulnerability		2 Nov 2026
4CVE-2026-119301 - Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas
Original article		Confirmed 100
Vulnerability		2 Nov 2026
5Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers
Original article		Reported 70
Vulnerability		2 Nov 2026
6Is Your SOC Ready for AI Agents? A Maturity Check Before You Deploy
Original article		Reported 70
Vulnerability		2 Nov 2026
7What exploited vulnerabilities have in common: A data-driven analysis of real-world attacks
Original article		Reported 60
Vulnerability		2 Nov 2026

Vulnerabilities to watch

CVEProductExploitedCVSSEPSS
CVE-2026-119301No—0.3%
CVE-2026-105811No—0.3%
CVE-2026-116635No—0.3%
CVE-2026-120497No—0.2%

Sources: official agencies, vendor security teams and the security press, linked from each story. Confidence scores reflect who reported each story. Tags and summaries are generated automatically and may be incomplete.