Security Signal
Threat intelligence report · last 30 days
Exploited in the wild · Confirmed · CISA Known Exploited Vulnerabilities
Generated 5 Nov 2026, 02:16 UTC · Live view: news.rogelio.cloud/?view=exploited&label=Confirmed&source=cisa-kev
Executive summary
- 3 stories in the last 30 days; 3 (100%) confirmed by official sources.
- 3 involve vulnerabilities attackers are already exploiting. Patch these first.
- Most common topic: Actively exploited (3).
- Most reported vendor: Adobe (1 stories).
- 12 of the listed vulnerabilities are on CISA's exploited list.
3
Stories
3
Actively exploited
0
Breaches & ransomware
3
Confirmed by official sources
Stories per day
Activity calendar
Topics
- Actively exploited — 3 (100%)
Countries in the news
Most reported vendors
ATT&CK techniques
No data
Top stories
| # | Story | Confidence | Updated |
|---|---|---|---|
| 1 | PHP2Shell: What to know about two critical PHP flaws Original article | Confirmed 100 Actively exploited | 4 Nov 2026 |
| 2 | CVE-2026-76418 (Cisco Secure Firewall ASA Software and Cisco Secure FTD Software) added to CISA Known Exploited Vulnerabilities Original article | Confirmed 100 Actively exploited | 29 Oct 2026 |
| 3 | CVE-2026-110447 (Collabora Collabora Online – Built-in CODE Server) added to CISA Known Exploited Vulnerabilities Original article | Confirmed 100 Actively exploited | 23 Oct 2026 |
Vulnerabilities to watch
| CVE | Product | Exploited | CVSS | EPSS |
|---|---|---|---|---|
| CVE-2024-27834 | Apple Multiple Products | Exploited | — | — |
| CVE-2026-109618 | PHP Group PHP | Exploited | — | — |
| CVE-2026-109619 | PHP Group PHP | Exploited | — | — |
| CVE-2026-110447 | Collabora Collabora Online – Built-in CODE Server | Exploited | — | — |
| CVE-2026-111357 | Ivanti Connect Secure | Exploited | — | — |
| CVE-2026-111497 | Google Brotli | Exploited | — | — |
| CVE-2026-114625 | Arista VeloCloud Orchestrator | Exploited | — | — |
| CVE-2026-118527 | Ivanti Connect Secure | Exploited | — | — |
| CVE-2026-119977 | WordPress WordPress Core | Exploited | — | — |
| CVE-2026-41709 | Broadcom VMware ESX | Exploited | — | — |
| CVE-2026-46300 | Linux Kernel | Exploited | — | — |
| CVE-2026-48356 | Adobe Commerce and Magento | Exploited | — | — |