Security Signal
Threat intelligence report · last 30 days

Confirmed · Official · GitLab

Generated 6 Nov 2026, 18:51 UTC · Live view: news.rogelio.cloud/?label=Confirmed&tier=1&vendor=GitLab

Executive summary

  • 4 stories in the last 30 days; 4 (100%) confirmed by official sources.
  • 1 involve vulnerabilities attackers are already exploiting. Patch these first.
  • Most common topic: Vulnerability (3).
  • Most reported vendor: GitLab (4 stories).
  • 12 of the listed vulnerabilities are on CISA's exploited list.
4
Stories
1
Actively exploited
0
Breaches & ransomware
4
Confirmed by official sources

Stories per day

2 10-0810-1310-1810-2310-2811-0211-06

Daily breakdown, last 14 days

S24 S25 M26 T27 W281 T29 F30 S31 S1 M2 T3 W4 T52 F6

Exploited Breach / ransomware Other

Topics

Most reported vendors

GitLab4Adobe1Apple1Arista1Broadcom1Google1Ivanti1Linux1PHP Group1VMware1

Top stories · newest days first, most confident within each day

  1. Confirmed 100Vulnerability
    5 Nov 2026
    2026-019: Critical Vulnerability in GitLab Community and Enterprise Editions Source: CERT-EU Advisories
    Vendor GitLab
  2. Confirmed 100Vulnerability
    5 Nov 2026
    2026-016: Critical Vulnerability in GitLab CE and EE Source: CERT-EU Advisories
    Vendor GitLab
  3. Confirmed 100Actively exploited
    4 Nov 2026
    PHP2Shell: What to know about two critical PHP flaws 2 sources: CISA Known Exploited Vulnerabilities, ESET WeLiveSecurity
    Vendor AdobeVendor AppleVendor AristaVendor BroadcomVendor GitLabVendor GoogleVendor IvantiVendor Linux
    CVE-2026-114625CVE-2026-109618CVE-2026-109619CVE-2026-48356CVE-2026-111497CVE-2026-41709+6 more
  4. Confirmed 100Vulnerability
    30 Oct 2026
    A Vulnerability in Brotli Library Could Allow for Remote Code Execution Source: MS-ISAC Advisories
    Vendor GitLab

Vulnerabilities to watch

CVEProductExploitedCVSSEPSS
CVE-2026-109618PHP Group PHPExploited—100.0%
CVE-2026-109619PHP Group PHPExploited—100.0%
CVE-2026-111497Google BrotliExploited—82.6%
CVE-2026-97229GitLab Community Edition and Enterprise EditionExploited—65.2%
CVE-2026-48356Adobe Commerce and MagentoExploited—47.5%
CVE-2026-46300Linux KernelExploited—16.1%
CVE-2024-27834Apple Multiple ProductsExploited—1.4%
CVE-2026-119977WordPress WordPress CoreExploited—1.2%
CVE-2026-114625Arista VeloCloud OrchestratorExploited—1.0%
CVE-2026-118527Ivanti Connect SecureExploited—0.8%
CVE-2026-41709Broadcom VMware ESXExploited—0.7%
CVE-2026-111357Ivanti Connect SecureExploited—0.5%

Sources: official agencies, vendor security teams and the security press, linked from each story. Confidence scores reflect who reported each story. Tags and summaries are generated automatically and may be incomplete.