Security Signal
Threat intelligence report · last 30 days

Vulnerability · Official

Generated 5 Nov 2026, 17:36 UTC · Live view: news.rogelio.cloud/?show=all&category=vulnerability&tier=1

Executive summary

  • 47 stories in the last 30 days; 47 (100%) confirmed by official sources.
  • No actively exploited vulnerabilities in this selection.
  • Most common topic: Vulnerability (47).
  • Most reported vendor: AWS (14 stories).
47
Stories
0
Actively exploited
0
Breaches & ransomware
47
Confirmed by official sources

Stories per day

9 10-0710-1210-1710-2210-2711-0111-05

Daily breakdown, last 14 days

2026-10-23: 2 stories (0 exploited, 0 breaches/ransomware) F2322026-10-24: 0 stories (0 exploited, 0 breaches/ransomware) S242026-10-25: 1 stories (0 exploited, 0 breaches/ransomware) S2512026-10-26: 1 stories (0 exploited, 0 breaches/ransomware) M2612026-10-27: 1 stories (0 exploited, 0 breaches/ransomware) T2712026-10-28: 5 stories (0 exploited, 0 breaches/ransomware) W2852026-10-29: 2 stories (0 exploited, 0 breaches/ransomware) T2922026-10-30: 4 stories (0 exploited, 0 breaches/ransomware) F3042026-10-31: 1 stories (0 exploited, 0 breaches/ransomware) S3112026-11-01: 0 stories (0 exploited, 0 breaches/ransomware) S12026-11-02: 4 stories (0 exploited, 0 breaches/ransomware) M242026-11-03: 5 stories (0 exploited, 0 breaches/ransomware) T352026-11-04: 6 stories (0 exploited, 0 breaches/ransomware) W462026-11-05: 9 stories (0 exploited, 0 breaches/ransomware) T59

Exploited Breach / ransomware Other

Topics

  • Vulnerability — 47 (100%)

Most reported vendors

AWS14Cisco12GitLab3Apache1Apple1Atlassian1Check Point1Citrix1F51Google1

Top stories · newest days first, most confident within each day

  1. Confirmed 100Vulnerability
    5 Nov 2026
    CVE-2026-119083 - GluonTS arbitrary file write during archive extraction Source: AWS Security Bulletins
    CVE-2026-119083
  2. Confirmed 100Vulnerability
    5 Nov 2026
    Cisco Secure Email Gateway SQL Injection Vulnerability 2 sources: Cisco Security Advisories, CERT-EU Advisories
    Impact Everyday lifeVendor Cisco
  3. Confirmed 100Vulnerability
    5 Nov 2026
    2026-018: Critical Vulnerabilities in PHP Source: CERT-EU Advisories
  4. Confirmed 100Vulnerability
    5 Nov 2026
    2026-019: Critical Vulnerability in GitLab Community and Enterprise Editions Source: CERT-EU Advisories
    Vendor GitLab
  5. Confirmed 100Vulnerability
    5 Nov 2026
    2026-016: Critical Vulnerability in GitLab CE and EE Source: CERT-EU Advisories
    Vendor GitLab
  6. Confirmed 100Vulnerability
    5 Nov 2026
    2026-015: Critical Vulnerability in Multiple Atlassian Products Source: CERT-EU Advisories
    Vendor Atlassian
  7. Confirmed 100Vulnerability
    5 Nov 2026
    2026-014: Critical Vulnerabilities in Citrix NetScaler ADC and Gateway Source: CERT-EU Advisories
    Impact Everyday lifeVendor Citrix
  8. Confirmed 100Vulnerability
    5 Nov 2026
    2026-013: Critical Vulnerability in F5 BIG-IP APM Source: CERT-EU Advisories
    Vendor F5
  9. Confirmed 100Vulnerability
    5 Nov 2026
    2026-012: Critical Vulnerabilities in Check Point Products Source: CERT-EU Advisories
    Vendor Check Point
  10. Confirmed 100Vulnerability
    5 Nov 2026
    2026-011: Critical Vulnerabilities in SAP Kernel and NetWeaver Message Server Source: CERT-EU Advisories
    Vendor SAP
    CVE-2026-44756CVE-2026-58240
  11. Confirmed 100Vulnerability
    4 Nov 2026
    CVE-2026-122192 - Guest Access to Firecracker Process Memory After a Failed Memory Discard 2 sources: AWS Security Bulletins, r/netsec
    Vendor AWS
    CVE-2026-122192
  12. Confirmed 100Vulnerability
    4 Nov 2026
    Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities Source: Cisco Security Advisories
    Vendor Cisco
  13. Confirmed 100Vulnerability
    4 Nov 2026
    Cisco Identity Services Engine Authorization Bypass Vulnerability Source: Cisco Security Advisories
    Vendor Cisco
  14. Confirmed 100Vulnerability
    4 Nov 2026
    Cisco Advance Notification for Publication of November 4, 2026, Security Advisories Source: Cisco Security Advisories
    Impact Everyday lifeVendor Cisco
    CVE-2026-76506CVE-2026-76419CVE-2026-20241
  15. Confirmed 100Vulnerability
    4 Nov 2026
    Cisco Unified Communications Manager Cross-Site Scripting Vulnerability Source: Cisco Security Advisories
    Vendor Cisco
  16. Confirmed 100Vulnerability
    4 Nov 2026
    Cisco UCS Central Software Remote Code Execution Vulnerability Source: Cisco Security Advisories
    Vendor Cisco
  17. Confirmed 100Vulnerability
    3 Nov 2026
    CVE-2026-119084 - Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Connection Parameters Source: AWS Security Bulletins
    CVE-2026-119084
  18. Confirmed 100Vulnerability
    3 Nov 2026
    CVE-2026-115413 - AWS API MCP Server OAuth token audience validation bypass Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-115413
  19. Confirmed 100Vulnerability
    3 Nov 2026
    CVE-2026-121652 - Stored cross-site scripting (XSS) in AWS Amplify maplibre-gl-js-amplify popup rendering Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-121652
  20. Confirmed 100Vulnerability
    3 Nov 2026
    CVE-2026-119922 - Babelfish for PostgreSQL Privilege Escalation Source: AWS Security Bulletins
    CVE-2026-119922
  21. Confirmed 100Vulnerability
    3 Nov 2026
    Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing 3 sources: AWS Security Bulletins, Fortinet PSIRT, The Hacker News
    Impact Everyday lifeVendor Linux
    CVE-2026-98432
  22. Confirmed 100Vulnerability
    2 Nov 2026
    CVE-2026-116635 - Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-116635
  23. Confirmed 100Vulnerability
    2 Nov 2026
    CVE-2026-105811 - Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-105811
  24. Confirmed 100Vulnerability
    2 Nov 2026
    CVE-2026-120497 - Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-120497
  25. Confirmed 100Vulnerability
    2 Nov 2026
    CVE-2026-119301 - Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas Source: AWS Security Bulletins
    Impact Everyday lifeVendor AWSVendor Apache
    CVE-2026-119301

Vulnerabilities to watch

CVEProductExploitedCVSSEPSS
CVE-2026-44756No—1.4%
CVE-2026-115414No—0.9%
CVE-2026-98432No—0.8%
CVE-2026-119922No—0.5%
CVE-2026-115812No—0.5%
CVE-2026-58240No—0.5%
CVE-2026-119084No—0.4%
CVE-2026-115419No—0.4%
CVE-2026-111943No—0.4%
CVE-2026-20043No—0.4%
CVE-2026-115813No—0.4%
CVE-2026-115417No—0.4%

Sources: official agencies, vendor security teams and the security press, linked from each story. Confidence scores reflect who reported each story. Tags and summaries are generated automatically and may be incomplete.