Security Signal
Threat intelligence report · last 30 days
2026-11-02 · Confirmed
Generated 5 Nov 2026, 12:28 UTC · Live view: news.rogelio.cloud/?day=2026-11-02&label=Confirmed
Executive summary
- 5 stories in the last 30 days; 5 (100%) confirmed by official sources.
- No actively exploited vulnerabilities in this selection.
- Most common topic: Vulnerability (4).
- Most reported vendor: AWS (4 stories).
5
Stories
0
Actively exploited
0
Breaches & ransomware
5
Confirmed by official sources
Stories per day
Daily breakdown, last 14 days
Exploited Breach / ransomware Other
Topics
- Vulnerability — 4 (80%)
- Policy / law — 1 (20%)
Most reported vendors
Top stories
| # | Story | Confidence | Updated |
|---|---|---|---|
| 1 | CVE-2026-116635 - Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server Original article | Confirmed 100 Vulnerability | 2 Nov 2026 |
| 2 | CVE-2026-105811 - Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS Original article | Confirmed 100 Vulnerability | 2 Nov 2026 |
| 3 | CVE-2026-120497 - Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows Original article | Confirmed 100 Vulnerability | 2 Nov 2026 |
| 4 | CVE-2026-119085 - Template injection in the publishing component of Virtual Engineering Workbench Original article | Confirmed 100 Policy / law | 2 Nov 2026 |
| 5 | CVE-2026-119301 - Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas Original article | Confirmed 100 Vulnerability | 2 Nov 2026 |
Vulnerabilities to watch
| CVE | Product | Exploited | CVSS | EPSS |
|---|---|---|---|---|
| CVE-2026-119085 | No | — | 0.6% | |
| CVE-2026-119301 | No | — | 0.3% | |
| CVE-2026-105811 | No | — | 0.3% | |
| CVE-2026-116635 | No | — | 0.3% | |
| CVE-2026-120497 | No | — | 0.2% |