Security Signal
Threat intelligence report · last 30 days

Exploited in the wild · last 7 days · Confirmed

Generated 5 Nov 2026, 05:26 UTC · Live view: news.rogelio.cloud/?view=exploited&since=7d&label=Confirmed

Executive summary

  • 5 stories in the last 30 days; 5 (100%) confirmed by official sources.
  • 5 involve vulnerabilities attackers are already exploiting. Patch these first.
  • Most common topic: Actively exploited (5).
  • Most reported vendor: Cisco (3 stories).
  • 12 of the listed vulnerabilities are on CISA's exploited list.
5
Stories
5
Actively exploited
0
Breaches & ransomware
5
Confirmed by official sources

Stories per day

2 10-0710-1210-1710-2210-2711-0111-05

Daily breakdown, last 14 days

2026-10-23: 1 stories (1 exploited, 0 breaches/ransomware) F2312026-10-24: 0 stories (0 exploited, 0 breaches/ransomware) S242026-10-25: 0 stories (0 exploited, 0 breaches/ransomware) S252026-10-26: 0 stories (0 exploited, 0 breaches/ransomware) M262026-10-27: 0 stories (0 exploited, 0 breaches/ransomware) T272026-10-28: 1 stories (1 exploited, 0 breaches/ransomware) W2812026-10-29: 2 stories (2 exploited, 0 breaches/ransomware) T2922026-10-30: 0 stories (0 exploited, 0 breaches/ransomware) F302026-10-31: 0 stories (0 exploited, 0 breaches/ransomware) S312026-11-01: 0 stories (0 exploited, 0 breaches/ransomware) S12026-11-02: 0 stories (0 exploited, 0 breaches/ransomware) M22026-11-03: 0 stories (0 exploited, 0 breaches/ransomware) T32026-11-04: 1 stories (1 exploited, 0 breaches/ransomware) W412026-11-05: 0 stories (0 exploited, 0 breaches/ransomware) T5

Exploited Breach / ransomware Other

Topics

  • Actively exploited — 5 (100%)

Most reported vendors

Cisco3Google3PHP Group2Palo Alto Networks2Adobe1Apple1Arista1Broadcom1GitLab1Ivanti1

Top stories

#StoryConfidenceUpdated
1Vulnerabilities in Node.js and Brotli Affecting Cisco Products: October 2026
Original article		Confirmed 100
Actively exploited		4 Nov 2026
2PHP2Shell: What to know about two critical PHP flaws
Original article		Confirmed 100
Actively exploited		4 Nov 2026
3CVE-2026-111497: Native Brotli Decoder Remote Code Execution and Memory Disclosure
Original article		Confirmed 100
Actively exploited		31 Oct 2026
4CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: CRITICAL)
Original article		Confirmed 100
Actively exploited		30 Oct 2026
5CVE-2026-76418 (Cisco Secure Firewall ASA Software and Cisco Secure FTD Software) added to CISA Known Exploited Vulnerabilities
Original article		Confirmed 100
Actively exploited		29 Oct 2026

Vulnerabilities to watch

CVEProductExploitedCVSSEPSS
CVE-2026-109618PHP Group PHPExploited—100.0%
CVE-2026-109619PHP Group PHPExploited—100.0%
CVE-2026-111497Google BrotliExploited—82.6%
CVE-2026-97229GitLab Community Edition and Enterprise EditionExploited—65.2%
CVE-2026-48356Adobe Commerce and MagentoExploited—47.5%
CVE-2026-46300Linux KernelExploited—16.1%
CVE-2026-114625Arista VeloCloud OrchestratorExploited—1.0%
CVE-2026-119977WordPress WordPress CoreExploited—1.0%
CVE-2026-118527Ivanti Connect SecureExploited—0.8%
CVE-2026-76418Cisco Secure Firewall ASA Software and Cisco Secure FTD SoftwareExploited—0.8%
CVE-2026-41709Broadcom VMware ESXExploited—0.7%
CVE-2024-27834Apple Multiple ProductsExploited—0.6%

Sources: official agencies, vendor security teams and the security press, linked from each story. Confidence scores reflect who reported each story. Tags and summaries are generated automatically and may be incomplete.