Security Signal
Threat intelligence report · last 30 days

2026-11-02 · Confirmed

Generated 8 Nov 2026, 10:49 UTC · Live view: news.rogelio.cloud/?show=all&day=2026-11-02&label=Confirmed

Executive summary

  • 5 stories in the last 30 days; 5 (100%) confirmed by official sources.
  • No actively exploited vulnerabilities in this selection.
  • Most common topic: Vulnerability (4).
  • Most reported vendor: AWS (4 stories).
5
Stories
0
Actively exploited
0
Breaches & ransomware
5
Confirmed by official sources

Stories per day

5 10-1010-1510-2010-2510-3011-0411-08

Daily breakdown, last 14 days

M26 T27 W28 T29 F30 S31 S1 M25 T3 W4 T5 F6 S7 S8

Exploited Breach / ransomware Other

Topics

Most reported vendors

AWS4Apache1

Top stories · newest days first, most confident within each day

  1. Confirmed 100Vulnerability
    2 Nov 2026
    CVE-2026-116635 - Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-116635
  2. Confirmed 100Vulnerability
    2 Nov 2026
    CVE-2026-105811 - Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-105811
  3. Confirmed 100Vulnerability
    2 Nov 2026
    CVE-2026-120497 - Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-120497
  4. Confirmed 100Policy / law
    2 Nov 2026
    CVE-2026-119085 - Template injection in the publishing component of Virtual Engineering Workbench Source: AWS Security Bulletins
    CVE-2026-119085
  5. Confirmed 100Vulnerability
    2 Nov 2026
    CVE-2026-119301 - Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas Source: AWS Security Bulletins
    Impact Everyday lifeVendor AWSVendor Apache
    CVE-2026-119301

Vulnerabilities to watch

CVEProductExploitedCVSSEPSSFixFixed in / due
CVE-2026-119085No—0.6%Patch availablevirtual-engineering-workbench c146486cec41f5b04fae57e9ce1a7fb40e695615
CVE-2026-119301No—0.3%Patch availableaws-sdk-pandas 3.17.1
CVE-2026-105811No—0.3%Patch availableqnabot-on-aws 7.4.6
CVE-2026-116635No—0.3%Patch availableaws-serverless-mcp-server 0.2.1
CVE-2026-120497No—0.2%Patch availableaidlc-traceability 96cf0eaa31a3ad8636e486c7fd2b91c55166393f

Sources: official agencies, vendor security teams and the security press, linked from each story. Confidence scores reflect who reported each story. Tags and summaries are generated automatically and may be incomplete.