Security Signal
Threat intelligence report · last 30 days

Exploited in the wild · Confirmed · Official

Generated 5 Nov 2026, 03:19 UTC · Live view: news.rogelio.cloud/?view=exploited&label=Confirmed&tier=1

Executive summary

  • 8 stories in the last 30 days; 8 (100%) confirmed by official sources.
  • 8 involve vulnerabilities attackers are already exploiting. Patch these first.
  • Most common topic: Actively exploited (8).
  • Most reported vendor: Cisco (4 stories).
  • 12 of the listed vulnerabilities are on CISA's exploited list.
8
Stories
8
Actively exploited
0
Breaches & ransomware
8
Confirmed by official sources

Stories per day

2 10-0710-1210-1710-2210-2711-0111-05

Daily breakdown, last 14 days

2026-10-23: 2 stories (2 exploited, 0 breaches/ransomware) F2322026-10-24: 0 stories (0 exploited, 0 breaches/ransomware) S242026-10-25: 0 stories (0 exploited, 0 breaches/ransomware) S252026-10-26: 1 stories (1 exploited, 0 breaches/ransomware) M2612026-10-27: 1 stories (1 exploited, 0 breaches/ransomware) T2712026-10-28: 1 stories (1 exploited, 0 breaches/ransomware) W2812026-10-29: 2 stories (2 exploited, 0 breaches/ransomware) T2922026-10-30: 0 stories (0 exploited, 0 breaches/ransomware) F302026-10-31: 0 stories (0 exploited, 0 breaches/ransomware) S312026-11-01: 0 stories (0 exploited, 0 breaches/ransomware) S12026-11-02: 0 stories (0 exploited, 0 breaches/ransomware) M22026-11-03: 0 stories (0 exploited, 0 breaches/ransomware) T32026-11-04: 1 stories (1 exploited, 0 breaches/ransomware) W412026-11-05: 0 stories (0 exploited, 0 breaches/ransomware) T5

Exploited Breach / ransomware Other

Topics

  • Actively exploited — 8 (100%)

Most reported vendors

Cisco4Google4PHP Group2Palo Alto Networks2Adobe1Apple1Arista1Broadcom1Collabora1GitLab1

Top stories

#StoryConfidenceUpdated
1Vulnerabilities in Node.js and Brotli Affecting Cisco Products: October 2026
Original article		Confirmed 100
Actively exploited		4 Nov 2026
2PHP2Shell: What to know about two critical PHP flaws
Original article		Confirmed 100
Actively exploited		4 Nov 2026
3CVE-2026-111497: Native Brotli Decoder Remote Code Execution and Memory Disclosure
Original article		Confirmed 100
Actively exploited		31 Oct 2026
4CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: CRITICAL)
Original article		Confirmed 100
Actively exploited		30 Oct 2026
5CVE-2026-76418 (Cisco Secure Firewall ASA Software and Cisco Secure FTD Software) added to CISA Known Exploited Vulnerabilities
Original article		Confirmed 100
Actively exploited		29 Oct 2026
6Cisco Expressway Series Security Hardening Release: October 2026
Original article		Confirmed 100
Actively exploited		27 Oct 2026
7Node2Shell CVEs
Original article		Confirmed 100
Actively exploited		26 Oct 2026
8CVE-2026-110447 (Collabora Collabora Online – Built-in CODE Server) added to CISA Known Exploited Vulnerabilities
Original article		Confirmed 100
Actively exploited		23 Oct 2026

Vulnerabilities to watch

CVEProductExploitedCVSSEPSS
CVE-2024-27834Apple Multiple ProductsExploited——
CVE-2026-109618PHP Group PHPExploited——
CVE-2026-109619PHP Group PHPExploited——
CVE-2026-110447Collabora Collabora Online – Built-in CODE ServerExploited——
CVE-2026-111357Ivanti Connect SecureExploited——
CVE-2026-111497Google BrotliExploited——
CVE-2026-114625Arista VeloCloud OrchestratorExploited——
CVE-2026-118527Ivanti Connect SecureExploited——
CVE-2026-119977WordPress WordPress CoreExploited——
CVE-2026-41709Broadcom VMware ESXExploited——
CVE-2026-46300Linux KernelExploited——
CVE-2026-48356Adobe Commerce and MagentoExploited——

Sources: official agencies, vendor security teams and the security press, linked from each story. Confidence scores reflect who reported each story. Tags and summaries are generated automatically and may be incomplete.