Security Signal
Threat intelligence report · last 30 days

2026-10-29 · Confirmed

Generated 8 Nov 2026, 06:23 UTC · Live view: news.rogelio.cloud/?show=all&day=2026-10-29&label=Confirmed

Executive summary

  • 7 stories in the last 30 days; 7 (100%) confirmed by official sources.
  • 2 involve vulnerabilities attackers are already exploiting. Patch these first.
  • Most common topic: Vulnerability (5).
  • Most reported vendor: Cisco (3 stories).
  • 4 of the listed vulnerabilities are on CISA's exploited list.
7
Stories
2
Actively exploited
0
Breaches & ransomware
7
Confirmed by official sources

Stories per day

7 10-1010-1510-2010-2510-3011-0411-08

Daily breakdown, last 14 days

M26 T27 W28 T297 F30 S31 S1 M2 T3 W4 T5 F6 S7 S8

Exploited Breach / ransomware Other

Topics

Most reported vendors

Cisco3AWS1PHP Group1Palo Alto Networks1Siemens1

Top stories · newest days first, most confident within each day

  1. Confirmed 100Actively exploited
    30 Oct 2026
    CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: CRITICAL) 3 sources: Unit 42, Palo Alto Networks Security Advisories, Cisco Security Advisories
    Vendor CiscoVendor PHP GroupVendor Palo Alto Networks
    CVE-2026-109618CVE-2026-109619
  2. Confirmed 100Vulnerability
    29 Oct 2026
    Cisco Finesse Server-Side Request Forgery Vulnerability Source: Cisco Security Advisories
    Vendor Cisco
  3. Confirmed 100Vulnerability
    29 Oct 2026
    CVE-2026-119115 - Incorrect authorization in issuer resolution in AWS Private CA Connector for Kubernetes Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-119115
  4. Confirmed 100Actively exploited
    29 Oct 2026
    CISA Adds Two Known Exploited Vulnerabilities to Catalog 2 sources: CISA Advisories, CISA Known Exploited Vulnerabilities
    Vendor Cisco
    CVE-2026-76418CVE-2026-97229
  5. Confirmed 100Vulnerability
    29 Oct 2026
    Hitachi Energy CoreTec Product Source: CISA Advisories
  6. Confirmed 100Vulnerability
    29 Oct 2026
    Siemens Mendix SAML Module Source: CISA Advisories
    Vendor Siemens
  7. Confirmed 100Vulnerability
    29 Oct 2026
    Hitachi Energy TRO600 series products Source: CISA Advisories

Vulnerabilities to watch

CVEProductExploitedCVSSEPSSFixFixed in / due
CVE-2026-109618PHP Group PHPExploited—100.0%Patch availablePHP 8.2.35, PHP 8.3.36, PHP 8.4.27
Due 29 Oct 2026
CVE-2026-109619PHP Group PHPExploited—100.0%Patch availablePHP 8.2.35, PHP 8.3.36, PHP 8.4.27
Due 29 Oct 2026
CVE-2026-97229GitLab Community Edition and Enterprise EditionExploited—65.2%Patch availableGitLab 19.2.8, GitLab 19.3.5, GitLab 19.4.2
Due 1 Nov 2026
CVE-2026-76418Cisco Secure Firewall ASA Software and Cisco Secure FTD SoftwareExploited—0.8%No fix known yet—
Due 1 Nov 2026
CVE-2026-119115No—0.2%Patch availableaws-privateca-issuer 1.10.1, aws-privateca-issuer 1.10.1-eksbuild.1

Sources: official agencies, vendor security teams and the security press, linked from each story. Confidence scores reflect who reported each story. Tags and summaries are generated automatically and may be incomplete.