Security Signal
Threat intelligence report · last 30 days
"CVE-2026-109618" · Apple
Generated 8 Nov 2026, 20:05 UTC · Live view: news.rogelio.cloud/?q=CVE-2026-109618&show=all&vendor=Apple
Executive summary
- 1 stories in the last 30 days; 1 (100%) confirmed by official sources.
- 1 involve vulnerabilities attackers are already exploiting. Patch these first.
- Most common topic: Actively exploited (1).
- Most reported vendor: Adobe (1 stories).
- 12 of the listed vulnerabilities are on CISA's exploited list.
1
Stories
1
Actively exploited
0
Breaches & ransomware
1
Confirmed by official sources
Stories per day
Daily breakdown, last 14 days
Exploited Breach / ransomware Other
Topics
Most reported vendors
Top stories · newest days first, most confident within each day
Vulnerabilities to watch
| CVE | Product | Exploited | CVSS | EPSS | Fix | Fixed in / due |
|---|---|---|---|---|---|---|
| CVE-2026-109618 | PHP Group PHP | Exploited | — | 100.0% | Patch available | PHP 8.2.35, PHP 8.3.36, PHP 8.4.27 Due 29 Oct 2026 |
| CVE-2026-109619 | PHP Group PHP | Exploited | — | 100.0% | Patch available | PHP 8.2.35, PHP 8.3.36, PHP 8.4.27 Due 29 Oct 2026 |
| CVE-2026-111497 | Google Brotli | Exploited | — | 82.6% | Patch available | Brotli 1.0.10, Brotli 1.1.1, Brotli 1.2.1 Due 10 Nov 2026 |
| CVE-2026-97229 | GitLab Community Edition and Enterprise Edition | Exploited | — | 65.2% | Patch available | GitLab 19.2.8, GitLab 19.3.5, GitLab 19.4.2 Due 1 Nov 2026 |
| CVE-2026-48356 | Adobe Commerce and Magento | Exploited | — | 47.5% | Patch available | Adobe Commerce 2.4.9-2026-jul, 2.4.8-2026-jul, 2.4.7-2026-jul, 2.4.6-2026-j, Adobe Commerce B2B 1.5.3-2026-jul, 1.5.2-2026-jul, 1.4.2-2026-jul, 1.3.4-2026-j, Magento Open Source 2.4.9-2026-jul, 2.4.8-2026-jul, 2.4.7-2026-jul, 2.4.6-2026-j Due 10 Nov 2026 |
| CVE-2026-46300 | Linux Kernel | Exploited | — | 16.1% | Patch available | Linux 3599e6b3cc1ada96883d496a50a210d3afbb6987, Linux 2f2b16022a2e10ca7bccfb98db5ed2ec0f72641c, Linux 9d3e5fd19fe1063bf607219e8562fbd567b8e8d5 Due 31 Oct 2026 |
| CVE-2024-27834 | Apple Multiple Products | Exploited | — | 1.5% | Patch available | Safari 17.5, iOS and iPadOS 16.7.8, iOS and iPadOS 17.5 Due 18 Nov 2026 |
| CVE-2026-119977 | WordPress WordPress Core | Exploited | — | 1.2% | No fix known yet | — Due 6 Nov 2026 |
| CVE-2026-114625 | Arista VeloCloud Orchestrator | Exploited | — | 1.0% | Patch available | VeloCloud Orchestrator 5.2.3.18, VeloCloud Orchestrator 6.1.3.10, VeloCloud Orchestrator 6.4.2.12 Due 26 Oct 2026 |
| CVE-2026-118527 | Ivanti Connect Secure | Exploited | — | 0.8% | Patch available | Connect Secure 25.1.1.3, Connect Secure 22.8R2.6 Due 13 Nov 2026 |
| CVE-2026-41709 | Broadcom VMware ESX | Exploited | — | 0.7% | Patch available | Cloud Foundation 5.2.4, ESX ESXi-9.1.0.0-25370933, ESX ESXi-9.0.2.0100-25595025 Due 11 Nov 2026 |
| CVE-2026-19868 | SonicWall SonicOS SSLVPN | Exploited | — | 0.6% | No fix known yet | — Due 20 Nov 2026 |