Security Signal
Threat intelligence report · last 30 days

last 30 days · Vulnerability

Generated 5 Nov 2026, 10:16 UTC · Live view: news.rogelio.cloud/?show=all&since=30d&category=vulnerability

Executive summary

  • 103 stories in the last 30 days; 46 (45%) confirmed by official sources.
  • No actively exploited vulnerabilities in this selection.
  • Most common topic: Vulnerability (103).
  • Most reported vendor: AWS (14 stories).
  • Most mentioned country: Italy.
103
Stories
0
Actively exploited
0
Breaches & ransomware
46
Confirmed by official sources

Stories per day

17 10-0710-1210-1710-2210-2711-0111-05

Daily breakdown, last 14 days

2026-10-23: 5 stories (0 exploited, 0 breaches/ransomware) F2352026-10-24: 1 stories (0 exploited, 0 breaches/ransomware) S2412026-10-25: 1 stories (0 exploited, 0 breaches/ransomware) S2512026-10-26: 4 stories (0 exploited, 0 breaches/ransomware) M2642026-10-27: 4 stories (0 exploited, 0 breaches/ransomware) T2742026-10-28: 10 stories (0 exploited, 0 breaches/ransomware) W28102026-10-29: 11 stories (0 exploited, 0 breaches/ransomware) T29112026-10-30: 8 stories (0 exploited, 0 breaches/ransomware) F3082026-10-31: 2 stories (0 exploited, 0 breaches/ransomware) S3122026-11-01: 2 stories (0 exploited, 0 breaches/ransomware) S122026-11-02: 9 stories (0 exploited, 0 breaches/ransomware) M292026-11-03: 9 stories (0 exploited, 0 breaches/ransomware) T392026-11-04: 17 stories (0 exploited, 0 breaches/ransomware) W4172026-11-05: 10 stories (0 exploited, 0 breaches/ransomware) T510

Exploited Breach / ransomware Other

Topics

  • Vulnerability — 103 (100%)

Countries in the news

Fiji: 0United Republic of Tanzania: 0Western Sahara: 0Canada: 0United States of America: 0Kazakhstan: 0Uzbekistan: 0Papua New Guinea: 0Indonesia: 0Argentina: 0Chile: 0Democratic Republic of the Congo: 0Somalia: 0Kenya: 0Sudan: 0Chad: 0Haiti: 0Dominican Republic: 0Russian Federation: 0Bahamas: 0Falkland Islands (Malvinas): 0Norway: 0Greenland: 0French Southern Territories: 0Timor-Leste: 0South Africa: 0Lesotho: 0Mexico: 0Uruguay: 0Brazil: 0Bolivia: 0Peru: 0Colombia: 0Panama: 0Costa Rica: 0Nicaragua: 0Honduras: 0El Salvador: 0Guatemala: 0Belize: 0Venezuela: 0Guyana: 0Suriname: 0France: 0Ecuador: 0Puerto Rico: 0Jamaica: 0Cuba: 0Zimbabwe: 0Botswana: 0Namibia: 0Senegal: 0Mali: 0Mauritania: 0Benin: 0Niger: 0Nigeria: 0Cameroon: 0Togo: 0Ghana: 0Cote d'Ivoire: 0Guinea: 0Guinea-Bissau: 0Liberia: 0Sierra Leone: 0Burkina Faso: 0Central African Republic: 0Republic of the Congo: 0Gabon: 0Equatorial Guinea: 0Zambia: 0Malawi: 0Mozambique: 0Eswatini: 0Angola: 0Burundi: 0Israel: 0Lebanon: 0Madagascar: 0State of Palestine: 0Republic of The Gambia: 0Tunisia: 0Algeria: 0Jordan: 0United Arab Emirates: 0Qatar: 0Kuwait: 0Iraq: 0Oman: 0Vanuatu: 0Cambodia: 0Thailand: 0Lao People's Democratic Republic: 0Myanmar: 0Vietnam: 0North Korea: 0South Korea: 0Mongolia: 0India: 0Bangladesh: 0Bhutan: 0Nepal: 0Pakistan: 0Afghanistan: 0Tajikistan: 0Kyrgyzstan: 0Turkmenistan: 0Islamic Republic of Iran: 0Syrian Arab Republic: 0Armenia: 0Sweden: 0Belarus: 0Ukraine: 0Poland: 0Austria: 0Hungary: 0Moldova, Republic of: 0Romania: 0Lithuania: 0Latvia: 0Estonia: 0Germany: 0Bulgaria: 0Greece: 0Türkiye: 0Albania: 0Croatia: 0Switzerland: 0Luxembourg: 0Belgium: 0Netherlands: 0Portugal: 0Spain: 0Ireland: 0New Caledonia: 0Solomon Islands: 0New Zealand: 0Australia: 0Sri Lanka: 0People's Republic of China: 0Taiwan, Province of China: 0Italy: 1Denmark: 0United Kingdom: 0Iceland: 0Azerbaijan: 0Georgia: 0Philippines: 0Malaysia: 0Brunei Darussalam: 0Slovenia: 0Finland: 0Slovakia: 0Czech Republic: 0Eritrea: 0Japan: 0Paraguay: 0Yemen: 0Saudi Arabia: 0Cyprus: 0Morocco: 0Egypt: 0Libya: 0Ethiopia: 0Djibouti: 0Uganda: 0Rwanda: 0Bosnia and Herzegovina: 0The Republic of North Macedonia: 0Serbia: 0Montenegro: 0Kosovo: 0Trinidad and Tobago: 0South Sudan: 0

Italy 1

Most reported vendors

AWS14Cisco13Google4GitLab3Linux3Microsoft3Apple2Barracuda2Apache1Atlassian1

Top stories

#StoryConfidenceUpdated
1Cisco Secure Email Gateway SQL Injection Vulnerability
Original article
Confirmed 100
Vulnerability
5 Nov 2026
22026-018: Critical Vulnerabilities in PHP
Original article
Confirmed 100
Vulnerability
5 Nov 2026
32026-019: Critical Vulnerability in GitLab Community and Enterprise Editions
Original article
Confirmed 100
Vulnerability
5 Nov 2026
42026-016: Critical Vulnerability in GitLab CE and EE
Original article
Confirmed 100
Vulnerability
5 Nov 2026
52026-015: Critical Vulnerability in Multiple Atlassian Products
Original article
Confirmed 100
Vulnerability
5 Nov 2026
62026-014: Critical Vulnerabilities in Citrix NetScaler ADC and Gateway
Original article
Confirmed 100
Vulnerability
5 Nov 2026
72026-013: Critical Vulnerability in F5 BIG-IP APM
Original article
Confirmed 100
Vulnerability
5 Nov 2026
82026-012: Critical Vulnerabilities in Check Point Products
Original article
Confirmed 100
Vulnerability
5 Nov 2026
92026-011: Critical Vulnerabilities in SAP Kernel and NetWeaver Message Server
Original article
Confirmed 100
Vulnerability
5 Nov 2026
10CVE-2026-122192 - Guest Access to Firecracker Process Memory After a Failed Memory Discard
Original article
Confirmed 100
Vulnerability
4 Nov 2026
11Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities
Original article
Confirmed 100
Vulnerability
4 Nov 2026
12Cisco Identity Services Engine Authorization Bypass Vulnerability
Original article
Confirmed 100
Vulnerability
4 Nov 2026
13Cisco Advance Notification for Publication of November 4, 2026, Security Advisories
Original article
Confirmed 100
Vulnerability
4 Nov 2026
14Cisco Unified Communications Manager Cross-Site Scripting Vulnerability
Original article
Confirmed 100
Vulnerability
4 Nov 2026
15Cisco UCS Central Software Remote Code Execution Vulnerability
Original article
Confirmed 100
Vulnerability
4 Nov 2026
16CVE-2026-119084 - Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Connection Parameters
Original article
Confirmed 100
Vulnerability
3 Nov 2026
17CVE-2026-115413 - AWS API MCP Server OAuth token audience validation bypass
Original article
Confirmed 100
Vulnerability
3 Nov 2026
18CVE-2026-121652 - Stored cross-site scripting (XSS) in AWS Amplify maplibre-gl-js-amplify popup rendering
Original article
Confirmed 100
Vulnerability
3 Nov 2026
19CVE-2026-119922 - Babelfish for PostgreSQL Privilege Escalation
Original article
Confirmed 100
Vulnerability
3 Nov 2026
20Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing
Original article
Confirmed 100
Vulnerability
3 Nov 2026
21CVE-2026-116635 - Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server
Original article
Confirmed 100
Vulnerability
2 Nov 2026
22CVE-2026-105811 - Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS
Original article
Confirmed 100
Vulnerability
2 Nov 2026
23CVE-2026-120497 - Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows
Original article
Confirmed 100
Vulnerability
2 Nov 2026
24CVE-2026-119301 - Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas
Original article
Confirmed 100
Vulnerability
2 Nov 2026
25CVE-2026-119117 - Insertion of sensitive information into a log file and process argument list in the Amazon Kinesis Producer Library for Java
Original article
Confirmed 100
Vulnerability
30 Oct 2026

Vulnerabilities to watch

CVEProductExploitedCVSSEPSS
CVE-2026-69836No—1.8%
CVE-2026-44756No—1.4%
CVE-2026-115414No—0.9%
CVE-2026-98432No—0.8%
CVE-2026-116606No—0.7%
CVE-2025-30026No—0.7%
CVE-2026-119922No—0.5%
CVE-2026-115812No—0.5%
CVE-2026-58240No—0.5%
CVE-2026-109593No—0.5%
CVE-2026-119084No—0.4%
CVE-2026-115419No—0.4%

Sources: official agencies, vendor security teams and the security press, linked from each story. Confidence scores reflect who reported each story. Tags and summaries are generated automatically and may be incomplete.