Security Signal
Threat intelligence report · last 30 days

2026-11-10 · Vulnerability

Generated 10 Nov 2026, 23:58 UTC · Live view: news.rogelio.cloud/?day=2026-11-10&category=vulnerability

Executive summary

  • 43 stories in the last 30 days; 30 (70%) confirmed by official sources.
  • No actively exploited vulnerabilities in this selection.
  • Most common topic: Vulnerability (43).
  • Most reported vendor: Microsoft (2 stories).
  • Most mentioned country: United Kingdom.
43
Stories
0
Actively exploited
0
Breaches & ransomware
30
Confirmed by official sources

Stories per day

43 10-1210-1710-2210-2711-0111-0611-10

Daily breakdown, last 14 days

W28 T29 F30 S31 S1 M2 T3 W4 T5 F6 S7 S8 M9 T1043

Exploited Breach / ransomware Other

Topics

Countries in the news

United Kingdom 1 · Russian Federation 1

Most reported vendors

Microsoft2SAP2AWS1Adobe1Apache1Apple1Cisco1SonicWall1

Top stories · newest days first, most confident within each day

  1. Confirmed 100Vulnerability
    10 Nov 2026
    Cisco Identity Services Engine Authorization Bypass Vulnerabilities Source: Cisco Security Advisories
    Vendor Cisco
  2. Confirmed 100Vulnerability
    10 Nov 2026
    Critical Patches Issued for Microsoft Products, November 10, 2026 Source: MS-ISAC Advisories
    Vendor Microsoft
  3. Confirmed 100Vulnerability
    10 Nov 2026
    CVE-2026-124848 - Incorrect default permissions on session transcripts and prompt history in Kiro CLI Source: AWS Security Bulletins
    CVE-2026-124848
  4. Confirmed 100Vulnerability
    10 Nov 2026
    CVE-2026-126087 - Untrusted search path in OpenJD Sessions for Python and the AWS Deadline Cloud worker agent Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-126087
  5. Confirmed 100Vulnerability
    10 Nov 2026
    Multiple Vulnerabilities in SonicWall SonicOS Could Allow for Authentication Bypass Source: MS-ISAC Advisories
    Vendor SonicWall
  6. Confirmed 100Vulnerability
    10 Nov 2026
    Allocation of resources without limits or throttling in fastapi Source: Fortinet PSIRT
  7. Confirmed 100Vulnerability
    10 Nov 2026
    Authentication bypass by primary weakness Source: Fortinet PSIRT
  8. Confirmed 100Vulnerability
    10 Nov 2026
    Authentication bypass by spoofing Source: Fortinet PSIRT
  9. Confirmed 100Vulnerability
    10 Nov 2026
    Authorization bypass through user-controlled key Source: Fortinet PSIRT
  10. Confirmed 100Vulnerability
    10 Nov 2026
    Heap-based buffer overflow Source: Fortinet PSIRT
  11. Confirmed 100Vulnerability
    10 Nov 2026
    Improper authentication in releasecontrol Source: Fortinet PSIRT
  12. Confirmed 100Vulnerability
    10 Nov 2026
    Improper certificate validation in RADIUS protocol Source: Fortinet PSIRT
  13. Confirmed 100Vulnerability
    10 Nov 2026
    Improper control of generation of code Source: Fortinet PSIRT
  14. Confirmed 100Vulnerability
    10 Nov 2026
    Improper limitation of a pathname to a restricted directory Source: Fortinet PSIRT
    Vendor Apache
  15. Confirmed 100Vulnerability
    10 Nov 2026
    Improper neutralization of argument delimiters in a command Source: Fortinet PSIRT
  16. Confirmed 100Vulnerability
    10 Nov 2026
    Improper neutralization of special elements used in a command Source: Fortinet PSIRT
  17. Confirmed 100Vulnerability
    10 Nov 2026
    Improper privilege management Source: Fortinet PSIRT
  18. Confirmed 100Vulnerability
    10 Nov 2026
    Incorrect authorization Source: Fortinet PSIRT
  19. Confirmed 100Vulnerability
    10 Nov 2026
    Incorrect authorization Source: Fortinet PSIRT
  20. Confirmed 100Vulnerability
    10 Nov 2026
    Incorrect authorization Source: Fortinet PSIRT
  21. Confirmed 100Vulnerability
    10 Nov 2026
    Incorrect authorization Source: Fortinet PSIRT
  22. Confirmed 100Vulnerability
    10 Nov 2026
    Incorrect authorization in django-guest Source: Fortinet PSIRT
  23. Confirmed 100Vulnerability
    10 Nov 2026
    Incorrect authorization in rest-api Source: Fortinet PSIRT
  24. Confirmed 100Vulnerability
    10 Nov 2026
    Incorrect implementation of authentication algorithm in fortiweb2 Source: Fortinet PSIRT
  25. Confirmed 100Vulnerability
    10 Nov 2026
    Insufficiently protected credentials Source: Fortinet PSIRT

Vulnerabilities to watch

CVEProductExploitedCVSSEPSSFixFixed in / due
CVE-2026-0250No——Patch availableGlobalProtect App 6.3.3-h9 (6.3.3-999), GlobalProtect App 6.2.8-h10 (6.2.8-948), GlobalProtect App 6.1.13
CVE-2026-111760No——No fix known yet—
CVE-2026-124848No——Patch availableKiro CLI 2.27.0
CVE-2026-126087No——Patch availableopenjd-sessions 0.11.0, deadline-cloud-worker-agent 0.33.0

Sources: official agencies, vendor security teams and the security press, linked from each story. Confidence scores reflect who reported each story. Tags and summaries are generated automatically and may be incomplete.