Security Signal
Threat intelligence report · last 30 days

last 7 days · Vulnerability · Confirmed

Generated 5 Nov 2026, 07:54 UTC · Live view: news.rogelio.cloud/?since=7d&category=vulnerability&label=Confirmed

Executive summary

  • 31 stories in the last 30 days; 31 (100%) confirmed by official sources.
  • No actively exploited vulnerabilities in this selection.
  • Most common topic: Vulnerability (31).
  • Most reported vendor: AWS (9 stories).
31
Stories
0
Actively exploited
0
Breaches & ransomware
31
Confirmed by official sources

Stories per day

8 10-0710-1210-1710-2210-2711-0111-05

Daily breakdown, last 14 days

2026-10-23: 0 stories (0 exploited, 0 breaches/ransomware) F232026-10-24: 0 stories (0 exploited, 0 breaches/ransomware) S242026-10-25: 0 stories (0 exploited, 0 breaches/ransomware) S252026-10-26: 0 stories (0 exploited, 0 breaches/ransomware) M262026-10-27: 0 stories (0 exploited, 0 breaches/ransomware) T272026-10-28: 1 stories (0 exploited, 0 breaches/ransomware) W2812026-10-29: 2 stories (0 exploited, 0 breaches/ransomware) T2922026-10-30: 4 stories (0 exploited, 0 breaches/ransomware) F3042026-10-31: 1 stories (0 exploited, 0 breaches/ransomware) S3112026-11-01: 0 stories (0 exploited, 0 breaches/ransomware) S12026-11-02: 4 stories (0 exploited, 0 breaches/ransomware) M242026-11-03: 5 stories (0 exploited, 0 breaches/ransomware) T352026-11-04: 6 stories (0 exploited, 0 breaches/ransomware) W462026-11-05: 8 stories (0 exploited, 0 breaches/ransomware) T58

Exploited Breach / ransomware Other

Topics

  • Vulnerability — 31 (100%)

Most reported vendors

AWS9Cisco8GitLab3Apache1Atlassian1Check Point1Citrix1F51Linux1SAP1

Top stories

#StoryConfidenceUpdated
1Cisco Secure Email Gateway SQL Injection Vulnerability
Original article		Confirmed 100
Vulnerability		5 Nov 2026
22026-018: Critical Vulnerabilities in PHP
Original article		Confirmed 100
Vulnerability		5 Nov 2026
32026-019: Critical Vulnerability in GitLab Community and Enterprise Editions
Original article		Confirmed 100
Vulnerability		5 Nov 2026
42026-016: Critical Vulnerability in GitLab CE and EE
Original article		Confirmed 100
Vulnerability		5 Nov 2026
52026-015: Critical Vulnerability in Multiple Atlassian Products
Original article		Confirmed 100
Vulnerability		5 Nov 2026
62026-014: Critical Vulnerabilities in Citrix NetScaler ADC and Gateway
Original article		Confirmed 100
Vulnerability		5 Nov 2026
72026-013: Critical Vulnerability in F5 BIG-IP APM
Original article		Confirmed 100
Vulnerability		5 Nov 2026
82026-012: Critical Vulnerabilities in Check Point Products
Original article		Confirmed 100
Vulnerability		5 Nov 2026
92026-011: Critical Vulnerabilities in SAP Kernel and NetWeaver Message Server
Original article		Confirmed 100
Vulnerability		5 Nov 2026
10CVE-2026-122192 - Guest Access to Firecracker Process Memory After a Failed Memory Discard
Original article		Confirmed 100
Vulnerability		4 Nov 2026
11Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities
Original article		Confirmed 100
Vulnerability		4 Nov 2026
12Cisco Identity Services Engine Authorization Bypass Vulnerability
Original article		Confirmed 100
Vulnerability		4 Nov 2026
13Cisco Advance Notification for Publication of November 4, 2026, Security Advisories
Original article		Confirmed 100
Vulnerability		4 Nov 2026
14Cisco Unified Communications Manager Cross-Site Scripting Vulnerability
Original article		Confirmed 100
Vulnerability		4 Nov 2026
15Cisco UCS Central Software Remote Code Execution Vulnerability
Original article		Confirmed 100
Vulnerability		4 Nov 2026
16CVE-2026-119084 - Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Connection Parameters
Original article		Confirmed 100
Vulnerability		3 Nov 2026
17CVE-2026-115413 - AWS API MCP Server OAuth token audience validation bypass
Original article		Confirmed 100
Vulnerability		3 Nov 2026
18CVE-2026-121652 - Stored cross-site scripting (XSS) in AWS Amplify maplibre-gl-js-amplify popup rendering
Original article		Confirmed 100
Vulnerability		3 Nov 2026
19CVE-2026-119922 - Babelfish for PostgreSQL Privilege Escalation
Original article		Confirmed 100
Vulnerability		3 Nov 2026
20Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing
Original article		Confirmed 100
Vulnerability		3 Nov 2026
21CVE-2026-116635 - Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server
Original article		Confirmed 100
Vulnerability		2 Nov 2026
22CVE-2026-105811 - Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS
Original article		Confirmed 100
Vulnerability		2 Nov 2026
23CVE-2026-120497 - Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows
Original article		Confirmed 100
Vulnerability		2 Nov 2026
24CVE-2026-119301 - Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas
Original article		Confirmed 100
Vulnerability		2 Nov 2026
25CVE-2026-119117 - Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java
Original article		Confirmed 100
Vulnerability		30 Oct 2026

Vulnerabilities to watch

CVEProductExploitedCVSSEPSS
CVE-2026-44756No—1.4%
CVE-2026-98432No—0.8%
CVE-2026-119922No—0.5%
CVE-2026-58240No—0.5%
CVE-2026-119084No—0.4%
CVE-2026-119301No—0.3%
CVE-2026-105811No—0.3%
CVE-2026-116635No—0.3%
CVE-2026-121652No—0.3%
CVE-2026-120497No—0.2%
CVE-2026-119148No—0.2%
CVE-2026-119115No—0.2%

Sources: official agencies, vendor security teams and the security press, linked from each story. Confidence scores reflect who reported each story. Tags and summaries are generated automatically and may be incomplete.