Security Signal
Threat intelligence report · last 30 days
Confirmed · Palo Alto Networks
Generated 5 Nov 2026, 06:40 UTC · Live view: news.rogelio.cloud/?label=Confirmed&vendor=Palo+Alto+Networks
Executive summary
- 2 stories in the last 30 days; 2 (100%) confirmed by official sources.
- 2 involve vulnerabilities attackers are already exploiting. Patch these first.
- Most common topic: Actively exploited (2).
- Most reported vendor: Palo Alto Networks (2 stories).
- 3 of the listed vulnerabilities are on CISA's exploited list.
2
Stories
2
Actively exploited
0
Breaches & ransomware
2
Confirmed by official sources
Stories per day
Daily breakdown, last 14 days
Exploited Breach / ransomware Other
Topics
- Actively exploited — 2 (100%)
Most reported vendors
Top stories
| # | Story | Confidence | Updated |
|---|---|---|---|
| 1 | CVE-2026-111497: Native Brotli Decoder Remote Code Execution and Memory Disclosure Original article | Confirmed 100 Actively exploited | 31 Oct 2026 |
| 2 | CVE-2026-109618 Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products (Severity: CRITICAL) Original article | Confirmed 100 Actively exploited | 30 Oct 2026 |
Vulnerabilities to watch
| CVE | Product | Exploited | CVSS | EPSS |
|---|---|---|---|---|
| CVE-2026-109618 | PHP Group PHP | Exploited | — | 100.0% |
| CVE-2026-109619 | PHP Group PHP | Exploited | — | 100.0% |
| CVE-2026-111497 | Google Brotli | Exploited | — | 82.6% |